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Advanced Micro Devices' microprocessors are breaking performance barriers. The 
cost effective Am386 microprocessors are ideal for both desktop and battery pow- 
ered portable computers. This data book describes the 32-bit Am386 Microprocessor 
Family with data sheets on Am386DX/DXL and Am386SX/SXL microprocessors. 

Am386 microprocessors are the fastest available with 40 MHz on the Am386DXL 
microprocessor, a 21 % performance increase over the 33-MHz version; and 25 MHz 
on the Am386SXL microprocessor, a 25% performance increase over the 20-MHz 
version. For portable systems the Am386DXL/SXL microprocessors' true static 
design allows longer battery life by offering low operating power consumption and a 
standby mode. 

We also offer 3-V Am386 microprocessors optimized for notebook applications. 
Information on these can be found in the AMD® 3-Volt System Logic for Personal 
Computers Data Book, publication #17028. 

Remember, our partnership helps you gain and keep the competitive edge. We are 
not your competition. 




Robert G. McConnell 

Vice President 

Personal Computer Products Division 
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High-Performance, Low-Power, 32-Bit Microprocessor Devices 



DISTINCTIVE CHARACTERISTICS 
■ Ideal for portable PCs 

— True static design for long battery life 
(Am386DXL microprocessor) 

—Typical standby Ice < 20 uA at DC (0 MHz) 

(Am386DXL microprocessor) 
—Typical operating Ice = 210 mA at 33 MHz 
— Lower power consumption than Intel i386DX or 

Intel i386SX 
— Small footprint 132-pin PQFP package 
— Wide range of chip sets and BIOS available to 

support standby mode capabilities 



—Performance on demand (0 to 40 MHz) 
Ideal for desktop PCs 

—40-, 33-, 25-, and 20-MHz operating speeds 
— Lower heat dissipation facilitates fan reduction or 

elimination for cost savings and noise reduction 
— Pin-for-pin replacement for Intel i386DX 
Compatible with 386DX systems and software 
Supports 387DX-compatible math 
coprocessors 
AMD advanced 0.8 micron CMOS technology 



GENERAL DESCRIPTION 

The Am386DX/DXL microprocessor is a high-speed, 
true static implementation of the Intel i386DX micropro- 
cessor. It is ideal for both desktop and battery-powered 
portable personal computers. For desktop PCs, the 
Am386DXL microprocessor offers a 21% increase in 
the maximum operating speed from 33 to 40 MHz. Also, 
this device offers lower heat dissipation, allowing sys- 
tem designers to remove or reduce the size and cost of 
the system cooling fan. 

For portables, the Am386DXL microprocessor's true 
static design offers longer battery life with low operating 
power consumption and standby mode. At 33 MHz, this 



device has 40% lower operating Ice than the Intel 
i386DX. Standby mode allows the Am386DXL micro- 
processor to be clocked down to MHz (DC) and retain 
full register contents. In standby mode, typical current 
draw is less than 20 uA, nearly a 1000x reduction in 
power consumption versus the Intel i386DX or Intel 
i386SX. 

Additionally, the Am386DXL microprocessor is avail- 
able in a small footprint 132-pin plastic quad flat pack 
(PQFP) package. This surface-mount package is 40% 
smaller than PGA, allowing smaller, lower-cost board 
designs without the need for a socket. 



Typical Ice 




O Intel i386DX @ 5.0 V 

A Am386DX/DXL CPU @ 5.0 V 

□ Am386DXLV CPU @ 3.3 V 



Note: Inputs at Vcc or Vss. 
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FUNCTIONAL DESCRIPTION 

True Static Operation (Am386DXL CPU) 

The Am386DXL microprocessor incorporates a true 
static design. Unlike dynamic circuit design, the 
Am386DXL device eliminates the minimum operating 
frequency restriction. It may be clocked from its maxi- 
mum speed of 40 MHz all the way down to MHz (DC). 
System designers can use this feature to design true 
32-bit battery-powered portable PCs with long battery 
life. 

Standby Mode (Am386DXi_ CPU) 

This true static design allows for a standby mode. At any 
of its operating speeds (40 MHz to DC), the Am386DXL 
microprocessor will retain its state (i.e., the contents of 
all of its registers). By shutting off the clock completely, 
the device enters standby mode. Since power con- 
sumption is a function of clock frequency, operating 
power consumption is reduced as the frequency is low- 
ered. In standby mode, typical current draw is reduced 
to less than 20 uA at DC. 

Not only does this feature save battery life, but it also 
simplifies the design of power-conscious notebook 
computers in the following ways: 

1. Eliminates the need for software in BIOS to save 
and restore the contents of registers. 

2. Allows simpler circuitry to control stopping of the 
clock since the system does not need to know 
the processor state. 



Lower Operating Ice 

True static design also allows lower operating Ice when 
operating at any speed. See the following graph for typi- 
cal current at operating speeds. 

Performance On Demand 

The Am386DXL microprocessor retains its state at any 
speed from MHz (DC) to its maximum operating speed 
(20, 25, 33, or 40 MHz). With this feature, system de- 
signers may vary the operating speed of the system to 
extend the battery life in portable systems. 

For example, the system could operate at low speeds 
during inactivity or polling operations. However, upon in- 
terrupt, the system clock can be increased up to its 
maximum speed. After a user-defined time-out period, 
the system can be returned to a low (or MHz) operating 
speed without losing its state. This design maximizes 
life while achieving optimal performance. 
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CONNECTION DIAGRAMS 

132-Lead Ceramic Pin Grid Array (PGA) Package—Top Side View 
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Note: NC = Not connected; connection of any NC pin may cause a malfunction or incompatability with future 
shippings of the Am386DX/DXL microprocessor. 



Am386 Microprocessors for Personal Computers 



CONNECTION DIAGRAMS (continued) 

132-Lead Ceramic Pin Grid Array (PGA) Package— Pin Side View 
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Note: NC = Not connected; connection of any NC pin may cause a malfunction or incompatability with future 
shippings of the Am386DX/DXL microprocessor. 
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CONNECTION DIAGRAMS (continued) 

PGA Pin Designations (sorted by Functional Grouping) 



Address 


Data 


Control 


NC 


Vcc 


Vss 


Pin Pin 


Pin 


Pin 


Pin Pin 


Pin 


Pin 


Pin 


Name No. 


Name 


No. 


Name No. 


No. 


No. 


No. 


A2 C4 


DO 


H12 


ADS E14 


A4 


A1 


A2 


A3 A3 


D1 


H13 


BEO E12 


B4 


A5 


A6 


A4 B3 


D2 


H14 


BET C13 


B6 


A7 


A9 


A5 B2 


D3 


J14 


BE2 B13 


B12 


A10 


B1 


A6 C3 


D4 


K14 


BE3 A13 


C6 


A14 


B5 


A7 C2 


D5 


K13 


BST6 C14 


C7 


C5 


B11 


A8 C1 


D6 


L14 


BUSY B9 


E13 


C12 


B14 


A9 D3 


D7 


K12 


CLK2 F12 


F13 


D12 


C11 


A10 D2 
A11 D1 


D8 
D9 


L13 
N14 


D/C A1 1 




G2 
G3 


F2 
F3 


ERROR A8 


A12 E3 


D10 


M12 


HLDA M14 




G12 


F14 


A13 E2 


D11 


N13 


HOLD D14 




G14 


J2 


A14 E1 
A15 F1 


D12 
D13 


N12 
P13 


INTR B7 




L12 
M3 


J3 
J12 


LOCK C10 


A16 G1 


D14 


P12 


M/TO A12 




M7 


J13 


A17 H1 


D15 


M11 


NA D13 




M13 


M4 


A18 H2 


D16 


N11 


NMI B8 




N4 


M8 


A19 H3 


D17 


N10 


PEREQ C8 




N7 


M10 


A20 J1 


D18 


P11 


READY G13 




P2 


N3 


A21 K1 


D19 


P10 


RESET C9 




P8 


P6 


A22 K2 


D20 


M9 


W/R B10 






P14 


A23 L1 


D21 


N9 










A24 L2 


D22 


P9 










A25 K3 


D23 


N8 










A26 M1 


D24 


P7 










A27 N1 


D25 


N6 










A28 L3 


D26 


P5 










A29 M2 


D27 


N5 










A30 P1 


D28 


M6 










A31 N2 


D29 
D30 
D31 


P4 
P3 
M5 











Am386 Microprocessors for Personal Computers 



CONNECTION DIAGRAMS (continued) 

PGA Pin Designations (sorted by Pin Number) 
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CONNECTION DIAGRAMS (continued) 

132-Lead Plastic Quad Flat Pack (PQFP) Package— Top Side View 
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Notes: Pin 1 is marked for orientation. 

NC = Not connected; connection of an NC pin may cause a malfunction or incompatibility with future 
shippings of the Am386DX/DXL microprocessor. 



Am386 Microprocessors for Personal Computers 



CONNECTION DIAGRAMS (continued) 

132-Lead Plastic Quad Flat Pack (PQFP) Package— Pin Side View 
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Notes: Pin 1 is marked for orientation. 

NC = Not connected; connection of an NC pin may cause a malfunction or incompatibility with future 
shippings of the Am386DX/DXL microprocessor. 
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CONNECTION DIAGRAMS (continued) 

PQFP Pin Designations (sorted by Functional Grouping) 



Address 


Data 


Control 


NC 


Vcc 


Vss 


Pin Pin 
Name No. 


Pin 
Name 


Pin 
No. 


Pin Pin 
Name No. 


Pin 
No. 


Pin 
No. 


Pin 
No. 


A2 67 


DO 


20 


ADS 27 


36 


2 


1 


A3 68 


D1 


19 


BE0 31 


37 


16 


10 


A4 69 


D2 


18 


BET 32 


39 


22 


11 


A5 70 


D3 


17 


BE2 33 


59 


34 


21 


A6 71 


D4 


15 


BE3 38 


60 


49 


23 


A7 72 
A8 74 


D5 
D6 


14 
13 


BS16 29 


61 
62 


56 
58 


25 
35 


BUSY 46 


A9 75 


D7 


12 


CLK2 24 


63 


73 


44 


A10 76 
A11 77 


D8 
D9 


9 

7 


D/C 41 




85 
99 


48 
51 


ERROR 47 


A12 78 


D10 


6 


FLT 54 




106 


55 


A13 79 


D11 


5 


HLDA 8 




110 


57 


A14 81 


D12 


4 


HOLD 28 




117 


64 


A15 82 
A16 84 


D13 
D14 


3 
131 


INTR 53 




123 
127 


65 
66 


LOCK 42 


A17 86 


D15 


130 


M/TO 40 






80 


A18 87 


D16 


129 


NA 30 






83 


A19 88 


D17 


128 


NMI 52 






90 


A20 89 
A21 93 


D18 
D19 


126 
125 


PEREQ 50 






91 
92 


READY 26 


A22 94 


D20 


124 


RESET 45 






105 


A23 95 


D21 


1.21 


W/R 43 






111 


A24 96 


D22 


120 








114 


A25 97 


D23 


119 








122 


A26 98 


D24 


118 








132 


A27 100 


D25 


116 










A28 101 


D26 


115 










A29 102 


D27 


113 










A30 103 


D28 


112 










A31 104 


D29 
D30 
D31 


109 
108 
107 
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PQFP Pin Designations (sorted by Pin Number) 
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Pin 
No. 


Pin 
Name 


Pin 
No. 


Pin 
Name 


Pin 
No. 


Pin 
Name 


Pin 
No. 


Pin 
Name 


Pin 
No. 


Pin 
Name 


Pin 
No. 


Pin 
Name 


1 

2 
3 
4 


Vss 
Vcc 
D13 
D12 


23 
24 
25 
26 


Vss 

CLK2 
Vss 


45 
46 
47 
48 


RESET 


67 
68 
69 
70 


A2 
A3 
A4 
A5 


89 
90 
91 
92 


A20 
Vss 
Vss 
Vss 


111 

112 
113 
114 


Vss 
D28 
D27 
Vss 


BUSY 


ERROR 
Vss 


READY 


5 


D11 


27 


ADS 


49 


Vcc 


71 


A6 


93 


A21 


115 


D26 


6 


D10 


28 


HOLD 


50 


PEREQ 


72 


A7 


94 


A22 


116 


D25 


7 


D9 


29 


BS16 


51 


Vss 


73 


Vcc 


95 


A23 


117 


Vcc 


8 


HLDA 


30 


NA 


52 


NMI 


74 


A8 


96 


A24 


118 


D24 


9 


D8 


31 


BEO 


53 


INTR 


75 


A9 


97 


A25 


119 


D23 


10 


Vss 


32 


BET 


54 


FLT 


76 


A10 


98 


A26 


120 


D22 


11 


Vss 


33 


BE2 


55 


Vss 


77 


A11 


99 


Vcc 


121 


D21 


12 


D7 


34 


Vcc 


56 


Vcc 


78 


A12 


100 


A27 


122 


Vss 


13 


D6 


35 


Vss 


57 


Vss 


79 


A13 


101 


A28 


123 


Vcc 


14 


D5 


36 


NC 


58 


Vcc 


80 


Vss 


102 


A29 


124 


D20 


15 


D4 


37 


NC 


59 


NC 


81 


A14 


102 


A30 


125 


D19 


16 


Vcc 


38 


BE3 


60 


NC 


82 


A15 


104 


A31 


126 


D18 


17 


D3 


39 


NC 


61 


NC 


83 


Vss 


105 


Vss 


127 


Vcc 


18 


D2 


40 


M/io 


62 


NC 


84 


A16 


106 


Vcc 


128 


D17 


19 
20 


D1 
DO 


41 
42 


D/C 


63 
64 


NC 
Vss 


85 
86 


Vcc 
A17 


107 
108 


D31 
D30 


129 
130 


D16 
D15 


LOCK 


21 


Vss 


43 


W/R 


65 


Vss 


87 


A18 


109 


D29 


131 


D14 


22 


Vcc 


44 


Vss 


66 


Vss 


88 


A19 


110 


Vcc 


132 


Vss 
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LOGIC SYMBOL 



2X Clock 



Address 
Bus 



Bus 

Cycle 

Control 



Bus 

Cycle 

Definition 





h> 


CLK2 
A31-A2 


LD 






D31-D0 

FIT 

RESET 

NMI 

INTR 

PEREQ 


< 


rv 


>l 


HLDA 


-^v> 


< 30 




SI 






^i 






< 4 


BE3-BE0 




SI 


















-> 


BS16 

ADS 

NA 






















READY 

W/R 
D/C 

M/io 






"W 






4 


« 






* 

4 


ERROR 














LOCK 

HC 




^ 










i 


i 


i 


r 









Float 



, Interrupt 
Control 



Math 
' Coprocessor 
Control 



Bus Arbitration 
Control 



15021B-003 
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ORDERING INFORMATION 
Standard Products 

AMD standard products are available in several packages and operating ranges. The order number (Valid Combination) is 
formed by a combination of the elements below. 



80386DXL -33 



L 



OPTIONAL PROCESSING (PQFP Only) 

None = Trimmed and Formed PQFP in High Temp Trays 
/F = Ringed PQFP in Horizontal Tubes 



0°C to +85°C for PGA) 
0°Cto+100°CforPQFP) 



TEMPERATURE RANGE 

Blank = Commercial (Tcase = 

(TcASE = 

SPEED OPTION 

-40 = 40 MHz 
-33 = 33 MHz 
-25 = 25 MHz 
-20 = 20 MHz 



DEVICE NUMBER/DESCRIPTION 

80386 DX/DXL 

Am386DX/DXL High-Performance, Low-Power, 32-Bit Microprocessor 



PACKAGE TYPE 

A = 132-Lead Ceramic Pin Grid Array (CGX 132) 
NG = 132-Lead Plastic Quad Flat Pack (PQB 132) 



Valid Combinations 


A80386DX/DXL 


-40 
-33 
-25 
-20 


NG80386DX 


-40, -40/F 


NG80386DX/DXL 


-33, -33/F 
-25, -25/F 



Valid Combinations 

Valid Combinations lists configurations planned to 
be supported in volume for this device. All speeds 
may not be available in all package combinations. 
Consult the local AMD sales office to confirm 
availability of specific valid combinations and to 
check on newly released combinations. 
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PIN DESCRIPTION 

A31-A2 

Address Bus (Outputs) 

Outputs physical memory or port I/O addresses. 

ADS 

Address Status (Active Low; Output) 

Indicatesjhat a v alid bus cy c le de f initio n and address 
(W/R, D/C, M/IO, BEO, BE1, BE2, BE3, and A31-A2) 
are being driven at the Am386DX/DXL microprocessor 
pins. 

BE3-BE0 

Byte Enables (Active Low; Outputs) 

Indicate which data bytes of the data bus take part in a 
bus cycle. 



BS16 

Bus Size 16 (Active Low; Input) 

Allows direct connection of 32-bit and 1 6-bit data buses. 



BUSY 

Busy (Active Low; Input) 

Signals a busy condition from a processor extension. 

CLK2 

Clock (Input) 

Provides the fundamental timing for the Am386DX/DXL 

microprocessor. 

D31-D0 

Data Bus (Inputs/Outputs) 

Inputs data during memory, I/O, and interrupt acknow- 
ledge read cycles and outputs data during memory and 
I/O write cycles. 

D/C 

Data/Control (Output) 

A bus cycle definition pin that distinguishes data cycles, 
either memory or I/O, from control cycles which are: 
interrupt acknowledge, halt, and instruction fetching. 



ERROR 

Error (Active Low; Input) 

Signals an error condition from a processor extension. 
FLT 

Float (Active Low; Input) 

An input signal which forces all bidirectional and output 
signals, including HLDA, to the three-state condition. 

FLT has an internal pull-up resistor, and if it is not used it 
should be unconnected. 

HLDA 

Bus Hold Acknowledge (Active High; Output) 

Indicates that the Am386DX/DXL microprocessor has 
surrendered control of its local bus to another bus 
master. 

HOLD 

Bus Hold Request (Active High; Input) 

Allows another bus master to request control of the local 
bus. 



INTR 

Interrupt Request (Active High; Input) 

A maskable input that signals the Am386DX/DXL micro- 
processor to suspend execution of the current program 
and execute an interrupt acknowledge function. 



LOCK 

Bus Lock (Active Low; Output) 

A bus cycle definition pin that indicates that other sys- 
tem bus masters are denied access to the system bus 
while it is active. 

M/IO 

Memory I/O (Output) 

A bus cycle definition pin that distinguishes memory 
cycles from input/output cycles. 

NA 

Next Address (Active Low; Input) 

Used to request address pipelining. 

NC 

No Connect 

Should always remain unconnected. Connection of a 
NC pin may cause the processor to malfunction or be 
incompatible with future steppings of the Am386DX/ 
DXL microprocessor. 

NMI 

Non-Maskable Interrupt Request 

(Active High; Input) 

A non-maskable input that signals the Am386DX/DXL 
microprocessor to suspend execution of the current pro- 
gram and execute an interrupt acknowledge function. 

PEREQ 

Processor Extension Request (Active High; Input) 

Indicates that the processor extension has data to be 
transferred by the Am386DX/DXL microprocessor. 



READY 

Bus Ready (Active Low; Input) 

Terminates the bus cycle. 

RESET 

Reset (Active High; Input) 

Suspends any operation in progress and places the 
Am386DX/DXL microprocessor in a known reset state. 

Vcc 

System Power (Input) 

Provides the +5-V nominal DC supply input. 

Vss 

System Ground (Input) 

Provides 0-V connection from which all inputs and out- 
puts are measured. 

W/R 

Write/Read (Output) 

A bus cycle definition pin that distinguishes write cycles 
from read cycles. 
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BASE ARCHITECTURE 

Introduction 

The Am386DX/DXL microprocessor consists of a 
central processing unit, a memory management unit, 
and a bus interface. 

The central processing unit consists of the execution 
unit and instruction unit. The execution unit contains 
the eight 32-bit general purpose registers that are used 
for both address calculation, data operations, and a 
64-bit barrel shifter used to speed shift, rotate, multiply, 
and divide operations. The multiply and divide logic 
uses a 1-bit per cycle algorithm. The multiply algorithm 
stops the iteration when the most significant bits of 
the multiplier are all zero. This allows typical 32-bit 
multiplies to be executed in under 1 ms. The instruction 
unit decodes the instruction op-codes and stores them 
in the decoded instruction queue for immediate use by 
the execution unit. 

The Memory Management Unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data repeatability and efficient 
sharing. The paging mechanism operates beneath and 
is transparent to the segmentation process to allow 
management of the physical address space. Each 
segment is divided into one or more 4-Kb pages. To 
implement a virtual memory system, the Am386DX/DXL 
microprocessor supports full restartability for all page 
and segment faults. 

Memory is organized into one or more variable length 
segments, each up to 4 Gb in size. A given region of the 
linear address space, a segment, can have attributes 
associated with it. These attributes include its location, 
size, type (i.e., stack, code, or data), and protection 
characteristics. Each task on an Am386DX/DXL micro- 
processor can have a maximum of 16,381 segments of 
up to 4 Gb each, thus providing 64 tb (trillion bytes) or 
virtual memory to each task. 

The segmentation unit provides four levels of protection 
for isolating and protecting applications and the 
operating system from each other. The hardware 
enforced protection allows the design of system with a 
high degree of integrity. 

The Am386DX/DXL microprocessor has two modes of 
operation: Real Address Mode (Real Mode) and Pro- 
tected Virtual Address Mode (Protected Mode). In Real 
Mode, the Am386DX/DXL device operates as a very 
fast 8086 but with 32-bit extensions, if desired. Real 
Mode is required primarily to setup the processor for 
Protected Mode operation. Protected Mode provides 



address to the sophisticated memory management, 
paging, and privilege capabilities of the processor. 

Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 
semantics, thus allowing 8086 software (an application 
program or an entire operating system) to execute. The 
Virtual 8086 tasks can be isolated and protected from 
one another and the host Am386DX/DXL microproces- 
sor operating system by the use of paging and the I/O 
Permission Bitmap. 

Finally, to facilitate high-performance system hardware 
designs, the Am386DX/DXL microprocessor bus inter- 
face offers address pipelining, dynamic data bus sizing, 
and direct Byte Enable signals for each byte of the 
data bus. These hardware features are described fully 
beginning in the Functional Data section. 

Register Overview 

The Am386DX/DXL microprocessor has 32 register re- 
sources in the following categories. 

• General Purpose Registers 

• Segment Registers 

• Instruction Pointer and Flags 

• Control Registers 

• System Address Registers 

• Debug Registers 

• Test Registers 

The registers are a superset of the 8086, 80186, and 
80286 registers, so all 16-bit 80186 and 80286 
registers are contained within the 32-bit Am386DX/DXL 
microprocessor. 

Figure 1 shows all the Am386DX/DXL microprocessor 
base architecture registers that include the general ad- 
dress and data registers, the instruction pointer, and the 
flags register. The contents of these registers are task- 
specific, so these registers are automatically loaded 
with a new context upon a task switch operation. 

The base architecture also includes six directly accessi- 
ble segments, each up to 4 Gb in size. The segments 
are indicated by the selector values placed in 
Am386DX/DXL CPU segment registers of Figure 1. 
Various selector values can be loaded as a program 
executes, if desired. 

The selectors are also task specific, so the segment reg- 
isters are automatically loaded with new context upon a 
task switch operation. 

The other types of registers Control, System Address, 
Debug, and Test are primarily used by system software. 
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General Data and Address Registers 

31 16 15 

EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 





AX 




BX 




CX 




DX 




SI 




Dl 




BP 




SP 



Segment Selector Registers 

15 



CS 
SS 
DS 
ES 
FS 
GS 



Code 
Stack 



Data 



Instruction Pointer and Flags Registers 

31 16 15 





IP 




FLAGS 



EIP 
EFLAGS 

15021B-004 



Figure 1. Base Architecture Registers 

Register Descriptions 

General-Purpose Registers 

The eight general-purpose registers of 32 bits hold data 
or address quantities. The general registers, Figure 2, 
support data operands of 1 , 8, 1 6, 32, and 64 bits and bit 
fields of 1 to 32 bits. They support address operands of 
1 6 and 32 bits. The 32-bit registers are named EAX, 
EBX, ECX, EDX, ESI, EDI, EBP, and ESP. 

The least significant 1 6 bits of the registers can be ac- 
cessed separately. This is done by using the 16-bit 
names of the registers AX, BX, CX, DX, SI, Dl, BP, and 
SP. When accessed as a 16-bit operand, the upper 
16 bits of the register are neither used nor changed. 

Finally, 8-bit operations can individually access the 
lower byte (bits 7-0) and the higher byte (bits 15-8) of 
general purpose registers AX, BX, CX, and DX. The 
lower bytes are named AL, BL, CL, and DL, respec- 
tively. The higher bytes are named AH, BH, CH, and DH, 
respectively. The individual byte accessibility offers 
additional flexibility for data operations, but is not used 
for effective address calculation. 



31 



1615 





AH 


A 


X 


AL 




BH 


B 


X 


BL 




CH 


C 


X 


CL 




DH 


D 


X 


DL 




SI 




Dl 




BP 




SP 


31 


1615 












EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 



EIP 



IP 
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Figure 2. General Registers 
and Instruction Pointer 



Instruction Pointer 

The instruction pointer, Figure 2, is a 32-bit register 
named EIP. EIP holds the offset of the next instruction 
to be executed. The offset is always relative to the base 
of the code segment (CS). The lower 16 bits (bits 15-0) 
of EIP contain the 16-bit instruction pointer named IP, 
which is used by 16-bit addressing. 

Flags Register 

The Flags Register is a 32-bit register named EFLAGS. 
The defined bits and bit fields within EFLAGS, shown in 
Figure 3, control certain operations and indicate status 
of the Am386DX/DXL microprocessor. The lower 1 6 bits 
(bits 15-0) of EFLAGS contain the 16-bit flag register 
named FLAGS, which is most useful when executing 
8086 and 80286 code. 

Note in the following descriptions, set means set to 1 
and reset means reset to 0. 

VM (Virtual 8086 Mode, bit 1 7) 

The VM bit provides Virtual 8086 Mode within 
Protected Mode. If set while the Am386DX/DXL 
microprocessor is in Protected Mode, the 
Am386DX/DXL microprocessor will switch to Vir- 
tual 8086 operation, handling segment loads as 
the 8086 does, but generating Exception 1 3 faults 
on privileged op-codes. The VM bit can be set only 
in Protected Mode by the I RET instruction (if cur- 
rent privilege level = 0) and by task switches at any 
privilege level. The VM bit is unaffected by POPF. 
PUSHF always pushes a in this bit, even if exe- 
cuting in Virtual 8086 Mode. The EFLAGS image 
pushed during interrupt processing or saved dur- 
ing task switches will contain a 1 in this bit if the in- 
terrupted code was executing as a Virtual 8086 
task. 
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RF (Resume Flag, bit 16) 

The RF flag is used in conjunction with the debug 
register breakpoints. It is checked at instruction 
boundaries before breakpoint processing. When 
RF is set, it causes any debug fault to be ignored 
on the next instruction. RF is then automatically 
reset at the successful completion of every in- 
struction (no faults are signaled) except the I RET 
instruction and the POPF instruction. (JMP, 
CALL, and INT instructions causing a task switch.) 
These instructions set RF to the value specified by 
the memory image . For example, at the end of the 
breakpoint service routine, the I RET instruction 
can pop an EFLAGS image having the RF bit set 
and resume the program's execution at the break- 
point address without generating another break- 
point fault on the same location. 

NT (Nested Task, bit 14) 

This flag applies to Protected Mode. NT is set to 
indicate that the execution of this task is nested 
within another task. If set, it indicates that the cur- 
rent nested task's Task State Segment (TSS) has 
a valid back link to the previous task's TSS. This 
bit is set or reset by control transfers to other 
tasks. The value of NT in EFLAGS is tested by the 
I RET instruction to determine whether to do an 
inter-task return or an intra-task return. A POPF 
or an IRET instruction will affect the setting of this 
bit according to the image popped at any privilege 
level. 

IOPL (Input/Output Privilege Level, bits 12-13) 

This two-bit field applies to Protected Mode. IOPL 
indicates the numerically maximum CPL (current 
privilege level) value permitted to execute I/O 
instructions without generating an Exception 13 
fault or consulting the I/O Permission Bitmap. It 
also indicates the maximum CPL value allowing 
alteration of the IF (INTR Enable Flag) bit when 
new values are popped into the EFLAGS register. 
POPF and IRET instruction can alter the IOPL 
field when executed at CPL = 0. Task switches 
can always alter the IOPL field when the new flag 
image is loaded from the incoming task's TSS. 

OF (Overflow Flag, bit 11) 

OD is set if the operation resulted in a signed over- 
flow. Signed overflow occurs when the operation 
resulted in carry/borrow into the sign bit (high- 
order bit) of the result but did not result in a carry/ 
borrow out of the high-order bit or vice-versa. For 
8-, 1 6-, and 32-bit operations, OF is set according 
to overflow at bits 7, 15, and 31 , respectively. 

DF (Direction Flag, bit 10) 

DF defines whether ESI and/or EDI registers 
postdecrement or postincrement during the sg 



AMD irl 

instructions. Postincrement occurs if DF is reset. 
Postdecrement occurs if DF is set. 

IF (INTR Enable Flag, bit 9) 

The IF flag, when set, allows recognition of exter- 
nal interrupts signaled on the INTR pin. When IF is 
reset, external interrupts signaled on the INTR are 
not recognized. IOPL indicates the maximum CPL 
value allowing alteration of the IF bit when new 
values are popped into EFLAGS or FLAGS. 

TF (Trap Enable Flag, bit 8) 

TF controls the generation of Exception 1 trap 
when single-stepping through code. When TF is 
set, the Am386DX/DXL microprocessor gener- 
ates an Exception 1 trap after the next instruction 
is executed. When TF is reset, Exception 1 traps 
occur only as a function of the breakpoint ad- 
dresses loaded into debug register DR3-DR0. 

SF (Sign Flag, bit 7) 

SF is set if the high-order bit of the result is set; it is 
reset otherwise. For 8-, 16-, and 32-bit oper- 
ations, SF reflects the state of bits 7, 15, and 31 , 
respectively. 

ZF (Zero Flag, bit 6) 

ZF is set if all bits of the result are 0. Otherwise it is 
reset. 

AF (Auxiliary Carry Flag, bit 4) 

The Auxiliary Flag is used to simplify the addition 
and subtraction of packed BCD quantities. AF is 
set if the operation resulted in a carry out of bit 
3 (addition) or a borrow into bit 3 (subtraction). 
Otherwise, AF is reset. AF is affected by carry out 
of, or borrow into, bit 3 only; regardless of overall 
operand length: 8, 16, or 32 bits. 

PF (Parity flags, bit 2) 

PF is set if the low-order 8 bits of the operation 
contain an even number of 1s (even parity). PF is 
reset if the low-order 8 bits have odd parity. PF is a 
function of only the low-order 8 bits, regardless of 
operand size. 

CF (Carry Flag, bit 0) 

CF is set if the operation resulted in a carry out 
of (addition) or a borrow into (subtraction) the 
high-order bit. Otherwise, CF is reset. For 8-, 16-, 
or 32-bit operations, CF is set according to carry/ 
borrow at bits 7, 15, or 31 , respectively. 
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Flags 



3322222222221111111111 
10987654321 0987 654321 



87654321 



EFLAGS 



Reserved for Future Use 


V 

M 


R 
F 





N 

T 


IOP 
L 


O 
F 


D 
F 


I 
F 


T 
F 


S 
F 


Z 
F 





A 
F 





P 
F 


1 


C 

F 



Virtual Mode 

Resume Flag 

Nested Task Flag 

I/O Privilege Level 

Overflow 

Direction Flag 

Interrupt Enable 



t 



Carry Flag 
Parity Flag 
Auxiliary Carry 
Zero Flag 
Sign Flag 
Trap Flag 



Note: indicates "Reserved for Future Use." Do not define; see Section Compatibility. 



Figure 3. Flags Registers 
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Descriptor Registers (Loaded Automatically) 
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Figure 4. Segment Registers and Associated Descriptor Registers 
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Segment Registers 

Six 16-bit segment registers hold segment selector 
values identifying the currently addressable memory 
segments. Segment registers are shown in Figure 4. In 
Protected Mode, each segment may range in size from 
one byte up to the entire linear and physical space of the 
machine, 4 Gb (2 32 bytes). If a maximum sized segment 
is used (limit = FFFFFFFFH), it should be Dword aligned 
(i.e., the least two significant bits of the segment base 
should be zero). This alignment will avoid a segment 
limit violation (Exception 13) caused by the wrap 
around. In Real Address Mode, the maximum segment 
size is fixed at 64 Kb (2 16 bytes). 

The six segments addressable at any given moment are 
defined by the segment registers: CS, SS, DS, ES, FS, 
and GS. The selector in SS indicates the current stack 



segment; the selectors in DS, ES, FS, and GS indicate 
the current data segments. 

Segment Descriptor Registers 

The segment descriptor registers are not programmer 
visible, yet it is very useful to understand their content. 
Inside the Am386DX/DXL microprocessor, a descriptor 
register (programmer invisible) is associated with each 
programmer-visible segment register, as shown by 
Figure 4. Each descriptor register holds a 32-bit seg- 
ment base address, a 32-bit segment limit, and the 
other necessary segment attributes. 

When a selector value is loaded into a segment register, 
the associated descriptor register is automatically up- 
dated with the correct information. In Real Address 
Mode, only the base address is updated directly (by 
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shifting the selector value four bits to the left), since the 
segment maximum limit and attributes are fixed in Real 
Mode. In Protected Mode, the base address, the limit, 
and the attributes are all updated per the contents of the 
segment descriptor indexed by the selector. 

Whenever a memory reference occurs, the segment de- 
scriptor register associated with the segment being 
used is automatically involved with the memory refer- 
ence. The 32-bit segment base address becomes a 
component of the linear address calculation, the 32-bit 
limit is used for the limit-check operation, and the attrib- 
utes are checked against the type of memory reference 
requested. 

Control Registers 

The Am386DX/DXL microprocessor has three control 
registers of 32 bits: CRO, CR2, and CR3 to hold machine 
state of a global nature (not specific to an individual 
task). These registers, along with System Address Reg- 
isters described in the next section, hold machine state 
that affects all tasks in the system. To access the Con- 
trol Registers, load and store instructions are defined. 

CRO: Machine Control Register (Includes 80286 
Machine Status Word) 

CRO, shown in Figure 5, contains six defined bits for 
control and status purposes. The low-order 16 bits of 
CRO are also known as the Machine Status Word 
(MSW) for compatibility with 80286 Protected Mode. 
LMSW and SMSW instructions are taken as special ali- 
ases of the load and store CRO operations, where only 
the low-order 1 6 bits of CRO are involved. For compati- 
bility with 80286 operating systems, the Am386DX/DXL 
microprocessor LMSW instructions work in an identical 
fashion to the LMSW instruction on the 80286 (i.e., it 
only operates on the low-order 16 bits of CRO and it 
ignores the new bits in CRO). New Am386DX/DXL mi- 
croprocessor operating systems should use the MOV 
CRO, Reg instruction. 

The defined CRO bits are described below. 
PG (Paging Enable, bit 31) 

The PG bit is set to enable the on-chip paging unit. 
It is reset to disable the on-chip paging unit. 



R (Reserved, bit 4) 

This bit is Reserved for Future Use. When loading 
CRO care should be taken to not alter the value of 
this bit. 

TS (Task Switched, bit 3) 

TS is automatically set whenever a task switch 
operation is performed. If TS is set, a coprocessor 
ESCape op-code will cause a Coprocessor Not 
Available trap (Exception 7). The trap handler 
typically saves a 387DX math coprocessor con- 
text belonging to a previous task, loads a 387DX 
math coprocessor state belonging to the current 
task, and clears the TS bit before returning to the 
faulting coprocessor op-code. 

EM (Emulate Coprocessor, bit 2) 

The Emulate coprocessor bit is set to cause all 
coprocessor op-codes to generate a Coprocessor 
Not Available fault (Exception 7). It is reset to allow 
coprocessor op-codes to be executed on an ac- 
tual 387DX math coprocessor (this is the default 
case after reset). Note that the WAIT op-code is 
not affected by the EM bit setting. 

MP (Monitor Coprocessor, bit 1 ) 

The M P bit is used in conjunction with the TS bit to 
determine if the WAIT op-code will generate a 
Coprocessor Not Available fault (Exception 7) 
when TS=1. When both MP=1 andTS = 1,the 
WAIT op-code generates a trap. Otherwise, 
the WAIT op-code does not generate a trap. Note 
that TS is automatically set whenever a task 
switch operation is performed. 

PE (Protection Enable, bit 0) 

The PE bit is set to enable the Protected Mode. If 
PE is reset, the processor operates again in Real 
Mode. PE may be set by loading MSW or CRO. PE 
can be reset only by a load into CRO. Resetting 
the PE bit is typically part of a longer instruction 
sequence needed for proper transition from Pro- 
tected Mode to Real Mode. Note that for strict 
80286 compatibility, PE cannot be reset by the 
LMSW instruction. 
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Figure 5. Control Register 
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CR1: Reserved 

CR1 is reserved for future processors. 

CR2: Page Fault Linear Address 

CR2, shown in Figure 6, holds the 32-bit linear address 
that caused the last page fault detected. The error code 
pushed onto the page fault handler's stack when it is in- 
voked provides additional status information on this 
page fault. 

CR3: Page Directory Base Address 

CR3, shown in Figure 6, contains the physical base 
address of the page directory table. The Am386DX/DXl 
microprocessor page directory table is always page- 
aligned (4-Kb aligned). Therefore, the lowest 12 bits 
of CR3 are ignored when written and they store as 
undefined. 

A task switch through a TSS that changes the value in 
CR3, or an explicit load into CR3 with any value, will in- 
validate all cached page table entries in the paging unit 
cache. Note that if the value in CR3 does not change 
during the task switch, the cached page table entries are 
not flushed. 

System Address Registers 

Four special registers are defined to reference the 
tables or segments supported by the 80286 CPU and 
Am386DX/DXL microprocessor protection model. 



These tables or segments are: 
GDT (Global Descriptor Table) 
IDT (Interrupt Descriptor Table) 
LDT (Local Descriptor Table) 
TSS (Task State Segment) 

The addresses of these tables and segments are stored 
in special registers, the System Address and System 
Segment Registers illustrated in Figure 7. These 
registers are named GDTR, IDTR, LDTR, and TR, re- 
spectively. The Protected Mode Architecture section 
describes the use of these registers. 

GDTR and IDTR 

These registers hold the 32-bit linear base address and 
16-bit limit of the GDT and IDT, respectively. 

The GDT and IDT segments, since they are global to 
all tasks in the system, are defined by 32-bit linear 
addresses (subject to page translation if paging is en- 
abled) and 16-bit limit values. 

LDTR and TR 

These registers hold the 1 6-bit selector for the LDT 
descriptor and the TSS descriptor, respectively. 

The LDT and TSS segments, since they are task- 
specific segments, are defined by selector values stored 
in the system segment registers. Note that a segment 
descriptor register (programmer-invisible) is associated 
with each system segment register. 
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Note: indicates "Reserved for Future Use." Do not define; see Section Compatibility. 



Figure 6. Control Registers 2 and 3 
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Debug and Test Registers 

Debug Registers: The six programmer accessible de- 
bug registers provide on-chip support for debugging. 
Debug Registers DR3-DR0 specify the four linear 
breakpoints. The Debug Control Register DR7 is used 
to set the breakpoints, and the Debug Status Register 
DR6 displays the current state of the breakpoints. The 
use of the debug registers is described in the Debugging 
Support section. 

Test Registers: Two registers are used to control the 
testing of the RAM/CAM (Content Addressable Memo- 
ries) in the Translation Look- Aside Buffer portion of the 
Am386DX/DXL microprocessor. TR6 is the command 
test register, and TR7 is the data register that contains 
the data of the Translation Look-Aside buffer test. Their 
use is discussed in the Testability section. Figure 8 
shows the Debug and Test registers. 





Debug Registers 

31 






Linear Breakpoint Address 


DRO 




Linear Breakpoint Address 1 


DR1 




Linear Breakpoint Address 2 


DR2 




Linear Breakpoint Address 3 


DR3 




Reserved for Future use. Do not define. 


DR4 




Reserved for Future use. Do not define. 


DR5 
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DR6 




Breakpoint Control 


DR7 




Test Registers (For Page Cache) 






Test Control 


TR6 




Test Status 


TR7 
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Figure 8. Debug and Test Registers 



Register Accessibility 

There are a few differences regarding the accessibility 
of the registers in Real and Protected Mode. Table 1 
summarizes these differences. Seethe Protected Mode 
Architecture section for further details. 

Compatibility 

VERY IMPORTANT NOTE: 
COMPATIBILITY WITH FUTURE PROCESSORS 

In the preceding register descriptions, note certain 
Am386DX/DXL microprocessor register bits are Re- 
served for Future Use. When reserved bits are called 
out, treat them as fully undefined. This is essential for 
software compatibility with future processors! Followthe 
guidelines below: 

1 . Do not depend on the state of any undefined bits 
when testing the values of defined register bits. 
Mask them out when testing. 

2. Do not depend on the state of any undefined bits 
when storing them to memory or another register. 

3. Do not depend on the ability to retain information 
written into any undefined bits. 

4. When loading registers, always load the undefined 
bits as zeros. 

5. However, registers that have been previously stored 
may be reloaded without masking. 

Depending upon the values of undefined register bits 
will make your software dependent upon the unspeci- 
fied Am386DX/DXL microprocessor handling of these 
bits. Depending on undefined values risks making soft- 
ware incompatible with future processors that define us- 
ages for the Am386DX/DXL CPU undefined bits. Avoid 
any software dependence upon the state of undefined 
Am386DX/DXL CPU register bits. 



Table 1. Register Usage 




Use In 
Real Mode 


Use In 
Protected Mode 


Use In 
Virtual 8086 Mode 


Register 


Load 


Store 


Load 


Store 


Load 


Store 


General Registers 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Segment Registers 


Yes 


Yes 


Yes 


Yes 


Yes 


Yes 


Flag Registers 


Yes 


Yes 


Yes 


Yes 


IOPL 


IOPL 


Control Registers 


Yes 


Yes 


PL = 


PL = 


No 


Yes 


GDTR 


Yes 


Yes 


PL = 


Yes 


No 


Yes 


IDTR 


Yes 


Yes 


PL = 


Yes 


No 


Yes 


LDTR 


No 


No 


PL = 


Yes 


No 


No 


TR 


No 


No 


PL = 


Yes 


No 


No 


Debug Control 


Yes 


Yes 


PL = 


PL = 


No 


No 


Test Registers 


Yes 


Yes 


PL = 


PL = 


No 


No 


Notes: PL = 0: The registers can be accessed only when the current privilege level is zero. 

IOPL: The PUSHF and POPF instructions are made I/O Privilege Level sensitive in Virtual 8086 Mode. 
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Instruction Set 

Instruction Set Overview 

The instruction set is divided into nine categories of 
operations. 

Data Transfer 

Arithmetic 

Shift/Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 

These Am386DX/DXL microprocessor instructions are 
listed in Table 2. 

All Am386DX/DXL microprocessor instructions operate 
on either 0, 1 , 2, or 3 operands where an operand re- 
sides in a register in the instruction itself or in memory. 
Most zero operand instructions (e.g., CLI, STI) take only 
one byte. One operand instructions generally are two 
bytes long. The average instruction is 3.2-bytes long. 
Since the Am386DX/DXL device has a 16-byte instruc- 
tion queue, an average of 5 instructions will be 
prefetched. The use of two operands permits the follow- 
ing types of common instructions. 

Register to Register 
Memory to Register 
Immediate to Register 
Register to Memory 
Immediate to Memory 

The operands can be either 8-, 1 6-, or 32-bits long. As a 
general rule, when executing code written for the 
Am386DX/DXL microprocessor (32-bit code), operands 
are 8 or 32 bits; when executing existing 80286 or 8086 
code (16-bit code), operands are 8 or 16 bits. Prefixes 
can be added to instructions that override the default 
length of the operands (i.e., use 32-bit operands for 
1 6-bit code or 1 6-bit operands for 32-bit code). 

Addressing Modes 

Addressing Modes Overview 

The Am386DX/DXL microprocessor provides a total of 
1 1 addressing modes for instructions to specify oper- 
ands. The addressing modes are optimized to allow the 
efficient execution of high-level languages such as C 
and FORTRAN, and they coverthe vast majority of data 
references needed by high-level languages. 



Register and Immediate Modes 

Two of the addressing modes provide for instructions 
that operate on register or immediate operands: 

Register Operand Mode: The operand is located in 
one of the 8-, 16-, or 32-bit general registers. 

Immediate Operand Mode: The operand is included in 
the instruction as part of the op-code. 

32-Bit Memory Addressing Modes 

The remaining nine modes provide a mechanism for 
specifying the effective address of an operand. The lin- 
ear address consists of two components: the segment 
base address and an effective address. The effective 
address is calculated by using combinations of the fol- 
lowing four address elements. 

Displacement: An 8- or 32-bit immediate value follow- 
ing the instruction. 

Base: The contents of any general-purpose register. 
The Base registers are generally used by compilers to 
point to the start of the local variable area. 

Index: The contents of any general-purpose register ex- 
cept for ESP. The Index registers are used to access the 
elements of an array, or a string of characters. 

Scale: The index register's value can be multiplied by a 
scale factor of either 1 , 2, 4, or 8. Scaled index mode is 
especially useful for accessing arrays or structures. 

Combinations of these four components make up the 
nine additional addressing modes. There is no perform- 
ance penalty for using any of these addressing combi- 
nations, since the effective address calculation is 
pipelined with the execution of other instructions. 

The one exception is the simultaneous use of Base and 
Index components that requires one additional clock. 

As shown in Figure 9, the effective address (EA) of 
an operand is calculated according to the following 
formula. 

EA = Base Reg + (Index Reg • Scaling) + Displacement 

Direct Mode: The operand's offset is contained as part 
of the instruction as an 8-, 16-, or 32-bit displacement. 

Example: INC Word PTR [500] 

Register Indirect Mode: A Base register contains the 
address of the operand. 

Example: MOV [ECX], EDX 

Based Mode: A Base register's contents is added to a 
Displacement to form the operands offset. 

Example: MOV ECX, [EAX + 24] 
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Table 2. Am386DX/DXL Microprocessor Instructions 
Table 2a. Data Transfer Table 2b. Arithmetic Instructions 



General Purpose 


MOV 


Move operand 


PUSH 


Push operand onto stack 


POP 


Pop operand off stack 


PUSHA 


Push all registers on stack 


POPA 


Pop all registers off stack 


XCHG 


Exchange operand register 


XLAT 


Translate 


Conversion 


MOVZX 


Move byte or Word, Dword with zero extension 


MOVSX 


Move byte or Word, Dword, sign extended 


CBW 


Convert byte to Word, or Word to Dword 


CWD 


Convert Word to Dword 


CWDE 


Convert Word to Dword extended 


CDQ 


Convert Dword to Qword 


Input/Output 


IN 


Input operand from I/O space 


OUT 


Output operand to I/O space 


Address Object 


LEA 


Load effective address 


LDS 


Load pointer into D segment register 


LES 


Load pointer into E segment register 


LFS 


Load pointer into F segment register 


LGS 


Load pointer into G segment register 


LSS 


Load pointer into S (Stack) segment register 


Flag Manipulation 


LAHF 


Load A register from Flags 


SAHF 


Store A register in Flags 


PUSHF 


Push flags onto stack 


POPF 


Pop flags off stack 


PUSHFD 


Push EFLAGS onto stack 


POPFD 


Pop EFLAGS off stack 


CLC 


Clear Carry Flag 


CLD 


Clear Direction Flag 


CMC 


Complement Carry Flag 


STC 


Set Carry Flag 


STD 


Set Direction Flag 



Addition 


ADD 


Add operands 


ADC 


Add with carry 


INC 


Increment operand by 1 


AAA 


ASCII adjust for addition 


DAA 


Decimal adjust for addition 


Subtraction 


SUB 


Subtract operands 


SBB 


Subtract with borrow 


DEC 


Decrement operand by 1 


NEG 


Negate operand 


CMP 


Compare operands 


DAS 


Decimal adjust for subtraction 


AAS 


ASCII adjust for subtraction 


Multiplication 


MUL 


Multiply Double/Single Precision 


IMUL 


Integer multiply 


AAM 


ASCII adjust after multiply 


Division 


DIV 


Divide unsigned 


IDIV 


Integer divide 


AAD 


ASCII adjust before division 


Table 2c. String Instructions 


MOVS 


Move byte or Word, Dword string 


INS 


Input string from I/O space 


OUTS 


Output string to I/O space 


CMPS 


Compare byte or Word, Dword string 


SCAS 


Scan Byte or Word, Dword string 


LODS 


Load byte or Word, Dword string 


STOS 


Store byte or Word, Dword string 


REP 


Repeat 


REPE/ 
REPZ 


Repeat while equal/zero 


RENE/ 
REPNZ 


Repeat while not equal/not zero 
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Table 2. Am386DX/DXL Microprocessor Instructions (continued) 
Table 2d. Logical Instructions 



Logicals 


NOT 


"NOT" operand 


AND 


"AND" operands 


OR 


"Inclusive OR" operands 


XOR 


"Exclusive OR" operands 


TEST 


"Test" operands 


Shifts 


SHL/SHR 


Shift logical left or right 


SAL/SAR 


Shift arithmetic left or right 


SHLD/ 
SHRD 


Double shift left or right 


Rotates 


ROL/ROR 


Rotate left/right 


RCL/RCR 


Rotate through carry left/right 



Table 2e. Bit Manipulation Instructions 



Table 2f. Program Control Instructions 



Table 2f. Program Control Instructions 
(continued) 



Single Bit Instructions 


BT 


Bit Test 


BTS 


Bit Test and Set 


BTR 


Bit Test and Reset 


BTC 


Bit Test and Complement 


BSF 


Bit Scan Forward 


BSR 


Bit Scan Reverse 



Unconditional Transfers 


CALL 


Call procedure/task 


RET 


Return from procedure 


JMP 


Jump 


Iteration Controls 


LOOP 


Loop 


LOOPE/ 
LOOPZ 


Loop if equal/zero 


LOOPNE/ 
LOOPNZ 


Loop if not equal/not zero 


JCXZ 


JUMP if register CX = 


Interrupts 


INT 


Interrupt 


INTO 


Interrupt if overflow 


IRET 


Return from interrupt/task 


CLI 


Clear interrupt enable 


STI 


Set interrupt enable 



Table 2g. High Level Language Instructions 



BOUND 


Check array bounds 


ENTER 


Setup parameter block for entering procedure 


LEAVE 


Leave procedure 



Table 2h. Protection Model 



Conditional Transfers 


SETCC 


Set byte equal to condition code 


JA/JNBE 


Jump if above/not below nor equal 


JAE/JNB 


Jump if above or equal/not below 


JB/JNAE 


Jump if below/not above nor equal 


JBE/JNA 


Jump if below or equal/not above 


JC 


Jump if carry 


JE/JZ 


Jump if equal/zero 


JG/JNLE 


Jump if greater/not less nor equal 


JGE/JNL 


Jump if greater or equal/not less 


JL/JNGE 


Jump if less/not greater nor equal 


JLE/JNG 


Jump if less or equal/not greater 


JNC 


Jump if not carry 


JNE/JNZ 


Jump if not equal/not zero 


JNO 


Jump if not overflow 


JNP/JPO 


Jump if not parity/parity odd 


JNS 


Jump if not sign 


JO 


Jump if overflow 


JP/JPE 


Jump if parity/parity even 


JS 


Jump if sign 



SGDT 


Store global descriptor table 


SIDT 


Store interrupt descriptor table 


STR 


Store task register 


SLDT 


Store local descriptor table 


LGDT 


Load global descriptor table 


LIDT 


Load interrupt descriptor table 


LTR 


Load task register 


LLDT 


Load local descriptor table 


ARPL 


Adjust requested privilege level 


LAR 


Load access rights 


LSL 


Load segment limit 


VERR/ 
VERW 


Verify segment for reading or writing 


LMSW 


Load machine status word (lower 16 bits 
of CRO) 


SMSW 


Store machine status word 



Table 2i. Processor Control Instructions 



HLT 


Halt 


WAIT 




Wait until BUSY negated 


ESC 


Escape 


LOCK 


Lock Bus 
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Index Mode: An Index register's contents is added to a 
Displacement to form the operands offset. 

Example: ADD EAX, TABLE [ESI] 

Scaled Index Mode: An Index register's contents is mul- 
tiplied by a scaling factor that is added to a Displace- 
ment to form the operands offset. 

Example: IMUL EBX, TABLE [ESI .4], 7 

Based Index Mode: The contents of a Base register is 
added to the contents of an Index register to form the 
effective address of an operand. 

Example: MOV EAX, [ESI] [EBX] 

Based Scaled Index Mode: The contents of an Index 
register is multiplied by a Scaling factor and the result is 
added to the contents of a Base register to obtain the 
operands offset. 

Example: MOV ECX, [EDX*8] [EAX] 



AMD fc* 

Based Index Mode with Displacement: The contents of 
an Index Register and a Base register's contents and a 
Displacement are all summed together to form the 
operand offset. 

Example: ADD EDX, [ESI] [EBP + OOFFFFFOH] 

Based Scaled Index Mode with Displacement: The con- 
tents of an Index register are multiplied by a Scaling 
factor; the result is added to the contents of a Base reg- 
ister and a Displacement to form the operand's offset. 

Example: MOV EAX, LOCALTABLE[EDI*4] [EBP + 80] 



Segment Registers 




Descriptor Registers 
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Figure 9. Addressing Mode Calculations 
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Differences Between 16- and 32-Bit Addresses 

In order to provide software compatibility with the 80286 
and the 8086, the Am386DX/DXL microprocessor can 
execute 16-bit instructions in Real and Protected 
Modes. The processor determines the size of the in- 
structions it is executing by examining the D bit in the CS 
segment descriptor. If the D bit is then all operand 
lengths and effective addresses are assumed to be 16 
bits long. If the D bit is 1 then the default length for oper- 
ands and addresses is 32 bits. In Real Mode, the default 
size for operands and addresses is 16 bits. 

Regardless of the default precision of the operands or 
addresses, the Am386DX/DXL microprocessor is able 
to execute either 1 6- or 32-bit instructions. This is speci- 
fied via the use of override prefixes. Two prefixes, the 
Operand Size Prefix and the Address Length Prefix, 
override the value of the D bit on an individual instruction 
basis. 

Example: The processor is executing in Real Mode and the 
programmer needs to access the EAX registers. The assem- 
bler code for this might be MOV EAX, 32-bit MEMORYOP. An 
assembler automatically determines that an Operand Size 
Prefix is needed and generates it. 

Example: The D bit is and the programmer wishes to use 
Scaled Index addressing mode to access an array. The 
Address Length Prefix allows the use of MOV DX, 
TABLE [ESI* 2]. The assembler uses an Address Length 
Prefix, since with D = 0, the default addressing mode is 1 6 bits. 

Example: The D bit is 1 and the program wants to store a 
16-bit quantity. The Operand Length Prefix is used to specify 
only a 16-bit value: MOV MEM16, DX. 

The Operand Length and Address Length prefixes can 
be applied separately or in combination to any instruc- 
tion. The Address Length Prefix does not allow ad- 
dresses over 64 Kb to be accessed in Real Mode. A 
memory address exceeding FFFFH will result in a Gen- 
eral Protection Fault. An Address Length Prefix only al- 
lows the use of the additional Am386DX/DXL micropro- 
cessor addressing modes. 

When executing 32-bit code, the Am386DX/DXL micro- 
processor uses either 8- or 32-bit displacements, and 
any register can be used as base or index registers. 
When executing 16-bit code, the displacements are 
either 8 or 16 bits, and the base and index register 
conform to the 80286 model. Table 3 illustrates the 
differences. 



Data Types 

The Am386DX/DXL microprocessor supports all data 
types commonly used in high-level languages. 

Bit: A single bit quantity. 

Bit Field: A group of up to 32 contiguous bits that spans a 
maximum of four bytes. 

Bit String: A set of contiguous bits on the Am386DX/ 
DXL microprocessor bit strings can be up to 4 Gb long. 

Byte: A signed 8-bit quantity. 

Unsigned Byte: An unsigned 8-bit quantity. 

Integer (Word): A signed 16-bit quantity. 

Long Integer (Double Word): A signed 32-bit 
quantity. All operations assume a 2's complement 
representation. 

Unsigned Integer (Word): An unsigned 16-bit quantity. 

Unsigned Long Integer (Double Word): An unsigned 
32-bit quantity. 

Signed Quad Word: A signed 64-bit quantity. 

Unsigned Quad Word: An unsigned 64-bit quantity. 

Offset: A 1 6- or 32-bit offset only quantity that indirectly 
references another memory location. 

Pointer: A full pointer which consists of a 1 6-bit segment 
selector and either a 1 6- or 32-bit offset. 

Char: A byte representation of an ASCII alphanumeric 
or control character. 

String: A contiguous sequence of bytes, words, or 
Dwords. A string may contain between 1 byte and 4 Gb. 

BCD: A byte (unpacked) representation of decimal 
digits 0-9. 

Packed BCD: A byte (packed) representation of two 
decimal digits 0-9 storing one digit in each nibble. 

When the Am386DX/DXL microprocessor is coupled 
with a 387DX math coprocessor then the following com- 
mon floating point types are supported. 

Floating Point: A signed 32-, 64-, or 80-bit real number 
representation. Floating point numbers are supported 
by a 387DX compatible math coprocessor. 

Figure 10 illustrates the data types supported by the 
Am386DX/DXL microprocessor and a 387DX compat- 
ible math coprocessor. 



Table 3. Base and Index Registers for 16- and 32-Bit Addresses 





16-Bit Addressing 


32-Bit Addressing 


Base Register 


BX, BP 


Any 32-bit GP Register 


Index Register 


SI, Dl 


Any 32-bit GP Register 
Except ESP 


Scale Factor 


None 


1,2,4,8 


Displacement 


0,8, 16 bits 


0, 8, 32 bits 
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7 









Signed 
Byte 




I I 1 1 I I 






Sign Bit -J 

1514 +1 


Magnitude 

8 7 


5 


Signed 
Word 




II 1 1 II 


I I I | I I I 


Sign Bit . 


J, LMSB 


I 



Unsigned 
Word 



Magnitude Magnitude 



Unsigned 
Byte 


1 1 1 | 1 1 1 










15 


Magnitude 

1 





III 


III 


Ml 


III 


i i 





31 


+3 


+2 16 15 


+ 




C 


> 


Signed 

Double 

Word 




I I | I I I 


I I I | I I I 


I I I | I I I 


III III 


Sign Bit - 


J, LMSB 








, 


Magnitude 

31 +3 +2 16 15 


+ 


c 


> 


nsigned 

Double 

Word 


I I I 


I I I 


I I I | I I I 


I I I | I I I 


I I I | I I I 












J 


63 +7 +6 4847 +5 


Magnitude 
+4 32 31 +3 




+2 16 15 +1 





Signed 
Quad 
Word 




















Sign Bit - 


J, LMSB 








I 



+N 



Magnitude 
+1 



I I I | I I I 



Binary 
Coded 
Decimal 
(BCD) BCD Digit N 



I I I | I I I 



7 v 

I I I | I I I 



ASCII 



Packed 
BCD 



I I I | I I I 



BCD Digit 1 BCD Digit 


I I I | I I I 



I I I | I I I 



ASCII Character N ASCII Character 1 ASCII Character 



+N 



I I I I I I I I I I I I I I I I I I I I I I I I 
• ••• ■ I 



I I 

Most Significant Digit 

7/15 +N 
I I I | I I I 



■— I— ' 



Byte 
String 



TTT 



Least Significant Digit 

15 ° C 

I I I | I I I 



Figure 10. Supported Data Types 
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+2 Gbits 



-2 Gbits 
2 1 



Bit 
String 



Short 

32-Bit 

Pointer 



BitO 



+3 



I I I | I I I I I I I | I I I I I I I | I I I I I I I | I I I 



Offset 



+5 



+4 



+3 



+2 



Long 

48-Bit 

Pointer 



I I I | I I I I I I I | I I I 



TTT 



TT 



I II | I II I I I | I I I I I I | I I I 



|_ 



Selector 



Offset 





79 


+9 


+8 


+7 


+6 


+5 


+4 


+3 


+2 


+1 





Floating 
Point* 
























Sign Bit 


J 




















1 



Exponent 



Magnitude 



+5 



+4 



+3 



+2 



I I I | I I I I I I I | I I I 



I I I | I I I I I I I | I I I I I I I | I I I 



32-Bit 
Bit Field 



TT 



TTT 



k- 



Bit Field _ 
1 to 32 Bits 



-I 



*Supported by 387DX-compatible math coprocessor. 

Figure 10. Supported Data Types (continued) 
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Memory Organization 

Introduction 

Memory on the Am386DX/DXL microprocessor is di- 
vided up into 8-bit quantities (Bytes), 16-bit quantities 
(Words), and 32-bit quantities (Dword). Words are 
stored in two consecutive bytes in memory with the low- 
order byte at the lowest address, the high-order byte at 
the highest address. Dwords are stored in four consecu- 
tive bytes in memory with the low-order byte at the low- 
est address, the high-order byte at the highest address. 
The address of a word or Dword is the byte address of 
the low-order byte. 

In addition to these basic datatypes, the Am386DX/DXL 
microprocessor supports two larger units of memory: 
pages and segments. Memory can be divided up into 
one or more variable length segments, which can be 
swapped to disk or shared between programs. Memory 
can also be organized into one or more 4-Kb pages. 
Finally, both segmentation and paging can be com- 
bined, gaining the advantages of both systems. The 
Am386DX/DXL microprocessor supports both pages 
and segments in order to provide maximum flexibility to 
the system designer. Segmentation and paging are 
complementary. Segmentation is useful for organizing 
memory in logical modules, and as such is a tool for the 
application programmer, while pages are useful for the 
system programmer for managing the physical memory 
of a system. 

Address Spaces 

The Am386DX/DXL microprocessor has three distinct 
address spaces: logical, linear, and physical. A logical 



address (also known as a virtual address) consists of a 
selector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing all of 
the addressing components (Base, Index, Displace- 
ment) discussed in Section Memory Address Modes 
into an effective address. Since each task on Am386DX/ 
DXL CPU has a maximum of 1 6K (2 14 -1 ) selectors, and 
offsets can be 4 Gb (2 32 bits), this gives a total of 2 46 bits 
or 64 tb of logical address space per task. The program- 
mer sees this virtual address space. 

The segmentation unit translates the logical address 
space into a 32-bit linear address space. If the paging 
unit is not enabled then the 32-bit linear address corre- 
sponds to the physical address. The paging unit trans- 
lates the linear address space into the physical address 
space. The physical address is what appears on the 
address pins. 

The primary difference between Real Mode and Pro- 
tected Mode is how the segmentation unit performs the 
translation of the logical address into the linear address. 
In Real Mode, the segmentation unit shifts the selector 
left four bits and adds the result to the offset to form 
the linear address. While in Protected Mode, every se- 
lector has a linear base address associated with it. The 
linear base address is stored in one of two operating 
system tables (i.e., the Local Descriptor Table or Global 
Descriptor Table). The selector's linear base address is 
added to the offset to form the final linear address. 

Figure 1 1 shows the relationship between the various 
address spaces. 



Effective Address Calculation 



Index 



Base 


Y 


Displacement 






Scale 
1,2,4,8 








— mC\« — 





15 



32i 



Effective Address 



Selector 
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Logical or 
Virtual Address 



Segment Register 



Descriptor Index 



Segmentation 
Unit 
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BE3-BE0 
A31-A2 



32i 



^ 



Linear 
Address 



Paging Unit 
(Optional Use) 



Physical 
Address 



Physical 
Memory 
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Segment Register Usage 

The main data structure used to organize memory is the 
segment. On the Am386DX/DXL microprocessor, seg- 
ments are variable sized blocks of linear addresses that 
have certain attributes associated with them. There are 
two main types of segments: code and data. The seg- 
ments are of variable size and can be as small as 1 byte 
or as large as 4 Gb (2 32 bytes). 

In order to provide compact instruction encoding and in- 
crease processor performance, instructions do not need 
to explicitly specify which segment register is used. A 
default segment register is automatically chosen ac- 
cording to the rules of Table 4 (Segment Register Selec- 
tion Rules). In general, data references use the selector 
contained in the DS register; Stack references use the 
SS register; and Instruction fetches use the CS register. 
The contents of the Instruction Pointer provides the off- 
set. Special segment override prefixes allow the explicit 
use of a given segment register, and override the implicit 
rules listed in Table 4. The override prefixes also allow 
the use of the ES, FS, and GS segment registers. 

There are no restrictions regarding the overlapping of 
the base addresses of any segments. Thus, all 6 seg- 
ments could have the base address set to zero and 
create a system with a 4-Gb linear address space. This 
creates a system where the virtual address space is the 
same as the linear address space. Further details of 
segmentation are discussed in Section Protected Mode 
Architecture. 



I/O Space 

The Am386DX/DXL microprocessor has two distinct 
physical address spaces: Memory and I/O. Generally, 
peripherals are placed in I/O space although the 
Am386DX/DXL CPU also supports memory-mapped 
peripherals. The I/O space consists of 64 Kb and can be 
divided into 64K 8-bit ports, 32K 16-bit ports, or 16K 
32-bit ports, or any combination of ports that add up to 
less than 64 Kb. The 64Kb I/O address space refers to 
physical memory rather than linear address since I/O in- 
structions do not go through the segmentation or paging 
hardware. The M/Io pin acts as an additional address 
line, thus allowing the system designer to easily deter- 
mine which address space the processor is accessing. 

The I/O ports are accessed via the IN and OUT I/O in- 
structions, with the port address supplied as an immedi- 
ate 8-bit constant in the instruction or in the DX register. 
All 8- and 1 6-bit port addresses are zero extended on 
the upper address lines. The I/O instructions cause the 
M/TO pin to be driven Low. 

I/O port addresses 00F8H through OOFFH are reserved. 

Interrupts 

Interrupts and Exceptions 

Interrupts and exceptions alter the normal program 
flow, in order to handle external events, to report errors 
or exceptional conditions. The difference between 
interrupts and exceptions is that interrupts are used to 



Table 4. Segment Register Selection Rules 



Type of Memory Reference 


Implied (Default) Segment Use 


Segment Override Prefixes Possible 


Code Fetch 


CS 


None 


Destination of PUSH, PUSHF, INT, 
CALL, PUSHA Instructions 


SS 


None 


Source of POP, POPA, POPF, 
IRET, RET Instructions 


SS 


None 


Destination of STOS, MOVS, REP 
STOS, REP MOVS Instructions 
(Dl is Base Register) 


ES 


None 


Other Data References with 
Effective Address Using Base 
Register of: 

[EAX] 

[EBX] 

[ECX] 

[EDX] 

[ESI] 

[EDI] 

[EBP] 

[ESP] 


DS 
DS 
DS 
DS 
DS 
DS 
SS 
SS 


CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 
CS, SS, ES, FS, GS 



30 



Am386 Microprocessors for Personal Computers 



AMD 



handle asynchronous external events while excep- 
tions handle instruction faults. Although a program can 
generate a software interrupt via an INT n instruction, 
the processor treats software interrupts as exceptions. 

Hardware interrupts occur as the result of an external 
event and are classified into two types: maskable or 
non-maskable. Interrupts are serviced after the execu- 
tion of the current instruction. After the interrupt handler 
is finished servicing the interrupt, execution proceeds 
with the instruction immediately after the interrupted in- 
struction. The differences between the interrupts are 
discussed in the Maskable Interrupt and Non-Maskable 
Interrupt sections. 

Exceptions are classified as faults, traps, or aborts de- 
pending on the way they are reported, and whether or 
not restart of the instruction causing the exception is 
supported. Faults are exceptions that are detected and 
serviced before the execution of the faulting instruction. 
A fault occurs in a virtual memory system when the 
processor references a page or a segment that is not 
present. The operating system fetches the page or seg- 
ment from disk, and then the Am386DX/DXL micropro- 
cessor restarts the instruction. Traps are exceptions 
that are reported immediately after the execution of the 
instruction that caused the problem. User defined inter- 
rupts are examples of traps. Aborts are exceptions that 



do not permit the precise location of the instruction caus- 
ing the exception to be determined. Aborts are used to 
report severe errors, such as a hardware error or illegal 
values in system tables. 

Thus, when an interrupt service routine has been com- 
pleted, execution proceeds from the instruction immedi- 
ately following the interrupted instruction. On the other 
hand, the return address from an exception fault routine 
will always point at the instruction causing the exception 
and include any leading instruction prefixes. Table 5 
summarizes the possible interrupts for the Am386DX/ 
DXL microprocessor and shows where the return ad- 
dress points. 

The Am386DX/DXL microprocessor has the ability to 
handle up to 256 different interrupts/exceptions. In order 
to service the interrupts, a table with up to 256 interrupt 
vectors must be defined. The interrupt vectors are sim- 
ply pointers to the appropriate interrupt service routine. 
In Real Mode (see Section Real Mode Introduction), 
the vectors are 4 byte quantities, a Code Segment 
plus a 16-bit offset; in Protected Mode, the interrupt 
vectors are 8 byte quantities that are put in an Inter- 
rupt Descriptor Table (see Section Introduction). Of 
the 256 possible interrupts, 32 are Reserved for Future 
Use, the remaining 224 are free to be used by the 
system designer. 



Table 5. Interrupt Vector Assignments 



Function 


Interrupt 
Number 


Instructions Which Can Cause Exceptions 


Return Address 

Points to 

Faulting 

Instruction 


Type 


Divide Error 





DIV, IDIV 


Yes 


FAULT 


Debug Exception 


1 


Any instruction 


Yes 


TRAP* 


NMI Interrupt 


2 


INT 2 or NMI 


No 


NMI 


One Byte Interrupt 


3 


INT 


No 


TRAP 


Interrupt on Overflow 


4 


INTO 


No 


TRAP 


Array Bounds Check 


5 


BOUND 


Yes 


FAULT 


Invalid Op-Code 


6 


Any illegal instruction 


Yes 


FAULT 


Device Not Available 


7 


ESC, WAIT 


Yes 


FAULT 


Double Fault 


8 


Any instruction that can generate an Exception 




ABORT 


Coprocessor Segment Overrun 


9 


ESC 


No 


ABORT 


Invalid TSS 


10 


JMP, CALL, IRET, INT 


Yes 


FAULT 


Segment Not Present 


11 


Segment register instructions 


Yes 


FAULT 


Stack Fault 


12 


Stack references 


Yes 


FAULT 


General Protection Fault 


13 


Any memory reference 


Yes 


FAULT 


Page Fault 


14 


Any memory access or code fetch 


Yes 


FAULT 


Reserved for Future Use 


15 








Coprocessor Error 


16 


ESC, WAIT 


Yes 


FAULT 


Reserved for Future Use 


17-31 








Two Byte Interrupt 


0-255 


INTn 


No 


TRAP 


*Some debug exceptions may report both traps on the previous instruction and faults on the next instruction. 
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Interrupt Processing 

When an interrupt occurs the following actions happen. 

• First, the current program address and the Flags 
are saved on the stack to allow resumption of the 
interrupted program. 

• Next, an 8-bit vector is supplied to the Am386DX/ 
DXL microprocessor that identifies the appropriate 
entry in the interrupt table. The table contains the 
starting address of the interrupt service routine. 
Then, the user supplied interrupt service routine is 
executed. 

• Finally, when an I RET instruction is executed the old 
processor state is restored and program execution 
resumes at the appropriate instruction. 

The 8-bit interrupt vector is supplied to the Am386DX/ 
DXL microprocessor in several different ways: excep- 
tions supply the interrupt vector internally; software INT 
instructions contain or imply the vector; maskable hard- 
ware interrupts supply the 8-bit vector via the interrupt 
acknowledge bus sequence. Non-Maskable hardware 
interrupts are assigned to interrupt vector 2. 

Maskable Interrupt 

Maskable interrupts are the most common way the 
Am386DX/DXL microprocessor responds to asynchro- 
nous external hardware events. A hardware interrupt 
occurs when the INTR is pulled High and the Interrupt 
Flag bit (IF) is enabled. The processor only responds to 
interrupts between instructions (REPeat String instruc- 
tions have an interrupt window between memory 
moves, which allows interrupts during long string 
moves). When an interrupt occurs, the processor reads 
an 8-bit vector supplied by the hardware that identifies 
the source of the interrupt (one of 224 user defined inter- 
rupts). The exact nature of the interrupt sequence is dis- 
cussed in Section Functional Data. 

The IF bit in the EFLAGS register is reset when an inter- 
rupt is being serviced. This effectively disables servicing 
additional interrupts during an interrupt service routine. 
However, the IF bit may be set explicitly by the interrupt 
handler to allow the nesting of interrupts. When an I RET 
instruction is executed the original state of the IF bit is 
restored. 

Non-Maskable Interrupt 

Non-maskable interrupts provide a method of servicing 
very high priority interrupts. A common example of 
the use of a non-maskable interrupt (NMI) would be to 
activate a power failure routine. When the NMI input 
is pulled High it causes an interrupt with an internally 
supplied vector value of 2. Unlike a normal hardware 
interrupt, no interrupt acknowledgment sequence is per- 
formed for NMI. 

While executing the NMI servicing procedure, the 
Am386DX/DXL microprocessor will not service further 
NMI requests until an interrupt return (IRET) instruction 
is executed orthe processor is reset. If NMI occurs while 
currently servicing an NMI, its presence will be saved for 



servicing after executing the first IRET instruction. The 
IF bit is cleared at the beginning of an NMI interrupt to 
inhibit further INTR interrupts. 

Software Interrupts 

A third type of interrupt/exception forthe Am386DX/DXL 
microprocessor is the software interrupt. An INT n in- 
struction causes the processor to execute the interrupt 
service routine pointed to by the nth vector in the inter- 
rupt table. 

A special case of the two byte software interrupt INT n is 
the one byte INT 3 or breakpoint interrupt. By inserting 
this one byte instruction in a program, the user can set 
breakpoints in the program as a debugging tool. 

A final type of software interrupt is the single step inter- 
rupt. It is discussed in the Debugging Support section. 

Interrupt and Exception Priorities 

Interrupts are externally-generated events. Mask- 
able Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at instruc- 
tion boundaries. When NMI and maskable INTR are 
both recognized at the same instruction boundary, the 
Am386DX/DXL microprocessor invokes the NMI serv- 
ice routine first. If after the NMI service routine has been 
invoked, maskable interrupts are still enabled, then the 
Am386DX/DXL CPU invokes the appropriate interrupt 
service routine. 

Table 6a. Am386DX/DXL Microprocessor Priority 

for Invoking Service Routines in Case of 

Simultaneous External Interrupts 



1. NMI 

2. INTR 



Exceptions are internally-generated events. Exceptions 
are detected by the Am386DX/DXL microprocessor if in 
the course of executing an instruction, the Am386DX/ 
DXL CPU detects a problematic condition. The 
Am386DX/DXL microprocessor then immediately in- 
vokes the appropriate exception service routine. The 
state of the Am386DX/DXL CPU is such that the instruc- 
tion causing the exception can be restarted. If the ex- 
ception service routine has taken care of the problem- 
atic condition, the instruction will execute without caus- 
ing the same exception. 

It is possible for a single instruction to generate several 
exceptions (for example, transferring a single operand 
could generate two page faults if the operand location 
spans two not present pages). However, only one ex- 
ception is generated upon each attempt to execute the 
instruction. Each exception service routine should cor- 
rect its corresponding exception, and restart the instruc- 
tion. In this manner, exceptions are serviced until the in- 
struction executes successfully. 

As the Am386DX/DXL microprocessor executes in- 
structions, it follows a consistent cycle in checking for 
exceptions, as shown in Table 6b. This cycle is repeated 
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as each instruction is executed and occurs in parallel 
with instruction decoding and execution. 

Instruction Restart 

The Am386DX/DXL microprocessor fully supports re- 
starting all instructions after faults. If an exception is 
detected in the instruction to be executed (Exception 
Categories 4 through 10 in Table 6b), the Am386DX/ 
DXL device invokes the appropriate exception service 
routine. The Am386DX/DXL microprocessor is in a state 
that permits restart of the instruction, for all cases but 
those in Table 6c. Note that all such cases are easily 
avoided by proper design of the operating system. 

Table 6b. Sequence of Exception Checking 

Consider the case of the Am386DX/DXL microprocessor 
having just completed an instruction. It then performs the 
following checks before reaching the point where the next 
instruction is completed: 

1 . Check for Exception 1 Traps from the instruction just 
completed (single-step via Trap Flag or Data Breakpoints 
set in the Debug Registers). 

2. Check for Exception 1 Faults in the next instruction 
(Instruction Execution Breakpoint set in the Debug 
Registers for the next instruction). 

3. Check for external NMI and INTR. 

4. Check for Segmentation Faults that prevented fetching 
the entire next instruction (Exceptions 1 1 and 13). 

5. Check for Paging Faults that prevented fetching the 
entire next instruction (Exception 14). 

6. Check for Faults decoding the next instruction [Exception 
6 if illegal op-code; Exception 6 if in Real Mode or in 
Virtual 8086 Mode and attempting to execute an 
instruction for Protected Mode only (see Section 
Protection and I/O Permission Bitmap); or Exception 13 if 
instruction is longer than 15 bytes, or privilege violation in 
Protected Mode (i.e., not at IOPL or at CPL = 0)]. 

7. If WAIT op-code, check if TS = 1 and M P = 1 (Exception 7 
if both are 1). 

8. If ESCAPE op-code for numeric coprocessor, check if 
EM = 1 or TS = 1 (Exception 7 if either are 1 ). 

9. If WAIT op-code or ESCAPE op-code for numeric 
coprocessor, check ERROR input signal (Exception 1 6 if 
ERROR input is asserted). 

1 0. Check in the following order for each memory reference 
required by the instruction. 

a. Check for Segmentation Faults that prevent trans- 
ferring the entire memory quantity 

(Exceptions 11, 12, 13). 

b. Check for Page Faults that prevent transferring 
the entire memory quantity (Exception 1 4). 

Note that the order stated supports the concept of the paging mecha- 
nism being underneath the segmentation mechanism. Therefore, for 
any given code or data reference in memory, segmentation excep- 
tions are generated before paging exceptions are generated. 



Table 6c. Conditions Preventing 
Instruction Restart 

1 . An instruction causes a task switch to a task whose Task 
State Segment (TSS) is partially not present. (An entire 
not present TSS is restartable.) Partially present TSS's 
can be avoided either by keeping the TSS's of such tasks 
present in memory or by aligning TSS segments to reside 
entirely within a single 4K page (for TSS segments of 
4 Kb or less). 

2. A coprocessor operand wraps around the top of a 64-Kb 
segment or a 4-Gb segment and spans three pages; and 
the page holding the middle portion of the operand is not 
present. This condition can be avoided by starting any 
segments containing coprocessor operands at a page 
boundary if the segments are approximately 64-200 Kb 
or larger (i.e., large enough for wraparound of the 
coprocessor operand to possibly occur). 

Note that these conditions are avoided by using the operating system 
designs mentioned in this table. 

Double Fault 

A Double Fault (Exception 8) results when the proces- 
sor attempts to invoke an exception service routine for 
the segment exceptions (10, 11, 12, or 13), but in the 
process of doing so, detects an exception other than a 
Page Fault (Exception 14). 

A Double Fault (Exception 8) will also be generated 
when the processor attempts to invoke the Page Fault 
(Exception 14) service routine, and detects an excep- 
tion other than a second Page Fault. In any functional 
system, the entire Page Fault service routine must re- 
main present in memory. 

Double Page faults however do not raise the Double 
Fault exception. If a second Page Fault occurs while the 
processor is attempting to enter the service routine for 
the first time, then the processor will invoke the Page 
Fault (Exception 14) handler a second time rather than 
the Double Fault (Exception 8) handler. A subsequent 
fault, though, will lead to shutdown. 

When a Double Fault occurs, the Am386DX/DXL micro- 
processor invokes the exception service routine for 
Exception 8. 

Reset and Initialization 

When the processor is initialized or Reset, the registers 
have the values shown in Table 7. The Am386DX/DXL 
microprocessor will then start executing instructions 
near the top of physical memory, at location 
FFFFFFF0H. When the first Inter-Segment Jump or Call 
is executed, address lines A31-A20 will drop Low for 
CS-relative memory cycles, and the Am386DX/DXL 
microprocessor will only execute instructions in the 
lower 1 Mb of physical memory. This allows the system 
designer to use a ROM at the top of physical memory 
to initialize the system and take care of Resets. 
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RESET forces the Am386DX/DXL microprocessor to 
terminate all execution and local bus activity. No instruc- 
tion execution or bus activity will occur as long as Reset 
is active. Between 350- and 450-CLK2 periods after 
Reset becomes inactive, the Am386DX/DXL device 
will start executing instructions at the top of physical 
memory. 

Table 7. Register Values after Reset 



Flag Word 


UUUU0002H 


Notel 


Machine Status Word (CRO) UUUUUUUOH 


Note 2 


Instruction Pointer 


0000FFF0H 




Code Segment 


F000H 


Note3 


Data Segment 


0000H 




Stack Segment 


0000H 




Extra Segment (ES) 


0000H 




Extra Segment (FS) 


0000H 




Extra Segment (GS) 


0000H 




DX Register 


Component and 
Stepping ID 


Note 5 


All Other Registers 


Undefined 


Note 4 



Notes: 

1 . EFLAGS Register. The upper 1 4 bits of the EFLAGS register are 
undefined, VM (Bit 1 7) and RF (Bit 1 6) and (Bit 1 5) are all other 
defined flag bits. 

2. CRO: (Machine Status Word). All of the defined fields in the CRO 
are (PG Bit 31, TS Bit 3, EM Bit 2, MP Bit 1, and PE 
BitO). 

3. The code Segment Register (CS) will have its Base Address set 
to FFFF0000H and Limit set to OFFFFH. 

4. All undefined bits are Reserved for Future Use and should not be 
used. 

5. DX register always holds component and stepping identifier (see 
Section Component and Revision Identifiers). EAX register holds 
self-test signature if self-test was requested (see Section Self- 
Test Signature). 

Testability 

Self-Test 

The Am386DX/DXL microprocessor has the capability 
to perform a self-test. The self-test checks the function 
of all the Control ROM and most of the non-random logic 
of the part. Approximately one-half of the Am386DX/ 
DXL microprocessor can be tested during self-test. 

Self-Test is initiated on the Am386DX/DXL micropro- 
cessor when the RESET pin transitions from High to 
Low, and the BUSY pin is Low. The self -test takes about 
2 19 clocks or approximately 26 ms with a 20-MHz 
Am386DX/DXL device. At the completion of self-test, 
the processor performs reset and begins normal opera- 
tion. The part has successfully passed self-test if the 
contents of the EAX register are zero (0). If the results of 
EAX are not zero then the self -test has detected a flaw in 
the part. 

TLB Testing 

The Am386DX/DXL microprocessor provides a mecha- 
nism for testing the Translation Look-Aside Buffer (TLB) 



if desired. This particular mechanism is unique to the 
Am386DX/DXL CPU and may not be continued in the 
same way in future processors. When testing the TLB, 
paging must be turned off (PG = in CRO) to enable the 
TLB testing hardware and avoid interference with the 
test data being written to the TLB. 

There are two TLB testing operations: 

1 . Write entries into the TLB; and, 

2. Perform TLB lookups. Two test registers, shown in 
Figure 12, are provided for the purpose of testing. 
TR6 is the test command register and TR7 is the test 
data register. The fields within these registers are 
defined below. 

C: This is the command bit. For a write into TR6to cause 
an immediate write into the TLB entry, write a to this 
bit. For a write into TR6 to cause an immediate TLB 
lookup, write a 1 to this bit. 

Linear Address: This is the tag field of the TLB . On a 
TLB write, a TLB entry is allocated to this linear address 
and the rest of that TLB entry is set per the value of TR7 
and the value just written into TR6. On a TLB lookup, the 
TLB is interrogated per this value and if one and only 
one TLB entry matches, the rest of the fields of TR6 and 
TR7 are set from the matching TLB entry. 

Physical Address: This is the data field of the TLB. On 
a write to the TLB, the TLB entry allocated to the linear 
address in TR6 is set to this value. On a TLB lookup, the 
data field (physical address) from the TLB is read out to 
here. 

PL: On a TLB write, PL = 1 causes the REP field of TR7 
to select which of four associative blocks of the TLB is to 
be written, but PL = allows the internal pointer in the 
paging unit to select which TLB block is written. On a 
TLB lookup, the PL bit indicated whether the lookup was 
a hit (PL gets set to 1) or a miss (PL gets reset to 0). 

V: The valid bit for this TLB entry. All valid bits can also 
be cleared by writing to CR3. 

D, D: The dirty bit for/from the TLB entry. 

U, U: The user bit for/from the TLB entry. 

W, W: The writable bit for/from the TLB entry. 

For D, U, and W, both the attribute and its complement 
are provided as tag bits to permit the option of a don't 
care on TLB lookups. The meaning of these pairs of bits 
is given in the following table. 



X 


X 


Effect During 
TLB Lookup 


Value of Bit 
X after TLB Write 





1 
1 




1 



1 


Miss All 
Match if X = 
Match if X = 1 
Match All 


Bit X becomes undefined 

Bit X becomes 

Bit X becomes 1 

Bit X becomes undefined 
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For writing a TLB entry: 

1 . Write TR7 for the desired physical address, PL, and 
REP values; and, 

2. Write TR6 with the appropriate linear address, etc., 
(be sure to write C = for write command). 

For looking up (reading) a TLB entry: 

1 . Write TR6 with the appropriate linear address (be 
sure to write C = 1 for lookup command); and, 

2. Read TR7 and TR6. If the PL bit in TR7 indicates a 
hit, then the other values reveal the TLB contents. If 
PL indicates a miss, then the othervalues in TR7 and 
TR6 are indeterminate. 

Debugging Support 

The Am386DX/DXL microprocessor provides several 
features that simplify the debugging process. 



AMD kr\ 

The three categories of on-chip debugging aids are: 

1 . The code execution breakpoint op-code (OCCH); 

2. The single-step capability provided by the TF bit in 
the flag register; and, 

3. The code and data breakpoint capability provided by 
the Debug Registers DR3-DR0, DR6, and DR7. 

Breakpoint Instruction 

A single-byte op-code breakpoint instruction is avail- 
able for use by software debuggers. The breakpoint op- 
code is OCCh and generates an Exception 3 trap when 
executed. In typical use, a debugger program can plant 
the breakpoint instruction at all desired code execution 
breakpoints. The single-byte breakpoint op-code is an 
alias for the two-byte general software interrupt instruc- 
tion, INT n, where n = 3. The only difference between 
INT 3 (OCCh) and INT n is that INT 3 is never IOPL- 
sensitive; but, INT n is lOPL-sensitive in Protected 
Mode and Virtual 8086 Mode. 
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Note: indicates "Reserved for Future Use." Do not define; see Section Compatibility. 



Figure 12. Test Registers 
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Single-Step Trap 

If the single-step flag (TF, bit 8) in the EFLAGS register 
is found to be set at the end of an instruction, a single- 
step exception occurs. The single-step exception is auto 
vectored to Exception 1 . Precisely, Exception 1 occurs 
as a trap after the instruction following the instruction 
that set TF. In typical practice, a debugger sets the TF bit 
of a flag register image on the debugger's stack. It then 
typically transfers control to the user program and loads 
the flag image with a signal instruction, the IRET instruc- 
tion. The single-step trap occurs after executing one in- 
struction of the user program. 

Since the Exception 1 occurs as a trap (that is, it occurs 
after the instruction has already executed), the CS:EIP 
pushed onto the debugger's stack points to the next 
unexecuted instruction of the program being debugged. 
An Exception 1 handler, merely by ending with an IRET 
instruction, can therefore efficiently support single- 
stepping through a user program. 

Debug Registers 

The Debug Registers are an advanced debugging fea- 
ture of the Am386DX/DXL microprocessor. They allow 
data access breakpoints as well as code execution 
breakpoints. Since the breakpoints are indicated by on- 
chip registers, an instruction execution breakpoint can 
be placed in ROM code or in code shared by several 
tasks, neither of which can be supported by the INT 3 
breakpoint op-code. 

The Am386DX/DXL microprocessor contains six Debug 
Registers, providing the ability to specify up to four dis- 
tinct breakpoint addresses, breakpoint control options, 
and read breakpoint status. Initially after reset, break- 
points will occur unless the debug registers are pro- 
grammed. Breakpoints set up in the Debug Registers 
are auto-vectored to Exception 1 . 

Linear Address Breakpoint Registers (DR3-DR0) 

Up to four breakpoint addresses can be specified by 
writing into Debug Registers DR3-DR0, shown in Fig- 
ure 13. The breakpoint addresses specified are 32-bit 
linear addresses. Am386DX/DXL microprocessor hard- 
ware continuously compares the linear breakpoint 



addresses in DR3-DR0 with the linear addresses gen- 
erated by executing software (a linear address is the re- 
sult of computing the effective address and adding the 
32-bit segment base address). Note that if paging is not 
enabled the linear address equals the physical address. 
If paging is enabled, the linear address is translated to a 
physical 32-bit address by the on-chip paging unit. Re- 
gardless of whether paging is enabled or not, however, 
the breakpoint registers hold linear addresses. 

Debug Control Register (DR7) 

A Debug Control Register, DR7, shown in Figure 13, 
allows several debug control functions, such as ena- 
bling the breakpoints and setting up other control 
options for the breakpoints. The fields within the Debug 
Control Register, DR7, are as follows. 

LENi (Breakpoint Length Specification Bits) 

A 2-bit LEN field exists for each of the four breakpoints. 
LEN specifies the length of the associated breakpoint 
field. The choices for data breakpoints are: 1 byte, 
2 bytes, and 4 bytes. Instruction execution break- 
points must have a length of 1 (LENi = 00). Encoding of 
the LENi field is as follows. 



LENi 
Encoding 


Breakpoint 
Field Width 


Usage of Least 

Significant Bits in 

Breakpoint Address 

Register i, (i = 0—3) 


00 


1 byte 


All 32-bits used to specify 
a single-byte breakpoint 
field. 


01 


2 bytes 


A31-A1 used to specify 
a two-byte, word-aligned 
breakpoint field. A0 in 
Breakpoint Address 
Register is not used. 


10 


Undefined — 

do not use 

this encoding 




11 


4 bytes 


A31-A2 used to specify 
a four-byte, Dword-aligned 
breakpoint field. A0 and 
A1 in Breakpoint Address 
Register are not used. 
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Breakpoint Linear Address 


Breakpoint 1 Linear Address 


Breakpoint 2 Linear Address 


Breakpoint 3 Linear Address 


Reserved for Future Use. Do not define. 


Reserved for Future Use. Do not define. 
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Note: indicates "Reserved for Future Use." Do not define; see Section Compatibility. 

Figure 13. Debug Registers 



DRO 
DR1 
DR2 
DR3 
DR4 
DR5 

DR6 
DR7 



15021B-O16 



The LENi field controls the size of breakpoint field i by 
controlling whether all low-order linear address bits 
in the breakpoint address register are used to detect 
the breakpoint event. Therefore, all breakpoint fields 
are aligned; 2-byte breakpoint fields begin on Word 
boundaries and 4-byte breakpoint fields begin on Dword 
boundaries. 

The following is an example of various size breakpoint 
fields. Assume the breakpoint linear address in DR2 is 
00000005H. In that situation, the following illustration 
indicates the region of the breakpoint field for lengths of 
1 , 2, or 4 bytes. 



DR2 = 00000005H; 

31 



LEN2=00B 

























bkpt f Id2 













DR2 = 00000005H; 
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LEN2 = 01B 
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DR2 = 00000005H; 
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LEN2=11B 
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00000008H 
00000004H 
00000000H 



00000008H 
00000004H 
00000000H 



00000008H 
00000004H 
00000000H 



RWi (Memory Access Qualifier Bits) 

A 2-bit RW field exists for each of the four breakpoints. 
The 2-bit R W field specifies the type of usage that must 
occur in order to activate the associated breakpoint. 



RW 
Encoding 


Usage 
Causing Breakpoint 


00 


Instruction execution only 


01 


Data writes only 


10 


Undefined — do not use this encoding 


11 


Data reads and writes only 



RW encoding 00 is used to set up an instruction execu- 
tion breakpoint. RW encodings 01 or 1 1 are used to set 
up write-only or read/write data breakpoints. 

Note that instruction execution breakpoints are taken 
as faults (i.e., before the instruction executes), but 
data breakpoints are taken as traps (i.e., after the data 
transfer takes place). 

Using LENi and RWi to Set Data Breakpoint i 

A data breakpoint can be set up by writing the linear 
address into DRi (i = 0-3). For data breakpoints, RWi 
can = 01 (write only) or 1 1 (write/read). LEN can = 00, 
01, or 11. 

If a data access falls entirely or partly within the data 
breakpoint field, the data breakpoint condition has oc- 
curred, and if the breakpoint is enabled, an Exception 1 
trap will occur. 

Using LENi and RWi to Set Instruction Execution 
Breakpoint i 

An instruction execution breakpoint can be set up 
by writing address of the beginning of the instruction 
(including prefixes if any) into DRi (i = 0-3). RWi 
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must = 00 and LEN must = 00 for instruction execution 
breakpoints. 

If the instruction beginning at the breakpoint address is 
about to be executed, the instruction execution break- 
point condition has occurred, and if the breakpoint is 
enabled, an Exception 1 fault will occur before the in- 
struction is executed. 

Note that an instruction execution breakpoint address 
must be equal to the beginning byte address of an in- 
struction (including prefixes) in order for the instruction 
execution breakpoint to occur. 

GD (Global Debug Register Access Detect) 

The Debug Registers can only be accessed in Real 
Mode or at privilege level in Protected Mode. The GD 
bit, when set, provides extra protection against any De- 
bug Register access even in Real Mode or at privilege 
level in Protected Mode. This additional protection fea- 
ture is provided to guarantee that a software debugger 
(or ICE-386) can have full control overthe Debug Regis- 
ter resources when required. The GD bit, when set, 
causes an Exception 1 fault if an instruction attempts to 
read or write any Debug Register. The GD bit is then 
automatically cleared when the Exception 1 handler is 
invoked, allowing the Exception 1 handler free access to 
the debug registers. 

GE and LE (Exact Data Breakpoint Match, Global 
and Local) 

If either GE or LE is set, any data breakpoint trap will be 
reported exactly after completion of the instruction that 
caused the operand transfer. Exact reporting is pro- 
vided by forcing the Am386DX/DXL microprocessor 
execution unit to wait for completion of data oper- 
and transfers before beginning execution of the next 
instruction. 

If exact data breakpoint match is not selected, data 
breakpoints may not be reported until several instruc- 
tions later or may not be reported at all. When enabling a 
data breakpoint, it is therefore recommended to enable 
the exact data breakpoint match. 

When the Am386DX/DXL microprocessor performs a 
task switch, the LE bit is cleared. Thus, the LE bit sup- 
ports fast task switching out of tasks that have enabled 
the exact data breakpoint match for their task-local 
breakpoints. The LE bit is cleared by the processor dur- 
ing a task switch to avoid having exact data breakpoint 
match enabled in the new task. Note that exact data 
breakpoint match must be re-enabled under software 
control. 

The Am386DX/DXL microprocessor GE bit is unaf- 
fected during a task switch. The GE bit supports exact 
data breakpoint match that is to remain enabled during 
all tasks executing in the system. 



Note that instruction execution breakpoints are always 
reported exactly, whether or not exact data breakpoint 
match is selected. 

Gi and Li (Breakpoint Enable, Global and Local) 

If either Gi or Li is set, then the associated breakpoint (as 
defined by the linear address in DRi, the length in LENi 
and the usage criteria in RWi) is enabled. If either Gi or 
Li is set and the Am386DX/DXL microprocessor detects 
the breakpoint condition, then the Exception 1 handler 
is invoked. 

When the Am386DX/DXL microprocessor performs a 
task switch to a new Task State Segment (TSS), all Li 
bits are cleared. Thus, the Li bits support fast task 
switching out of tasks that use some task-local break- 
point registers. The Li bits are cleared by the processor 
during a task switch to avoid spurious exceptions in the 
new task. Note that the breakpoints must be enabled un- 
der software control. 

All Am386DX/DXL microprocessor Gi bits are unaf- 
fected during a task switch. The Gi bits support break- 
points that are active in all tasks executing in the system. 

Debug Status Register (DR6) 

A Debug Status Register, DR6, shown in Figure 13, 
allows the Exception 1 handler to easily determine why 
it was invoked. Note the Exception 1 handler can be 
invoked as a result of one of several events. 

1 . DRO Breakpoint fault/trap. 

2. DR1 Breakpoint fault/trap. 

3. DR2 Breakpoint fault/trap. 

4. DR3 Breakpoint fault/trap. 

5. Single-step (TF) trap. 

6. Task switch trap. 

7. Fault due to attempted debug register access when 
GD = 1. 

The Debug Status Register contains single-bit flags for 
each of the possible events invoking Exception 1 . Note 
below that some of these events are faults (exception 
taken before the instruction is executed), while other 
events are traps (exception taken after the debug 
events occurred). 

The flags in DR6 are set by the hardware but never 
cleared by hardware. Exception 1 handler software 
should clear DR6 before returning to the user program 
to avoid future confusion in identifying the source of 
Exception 1 . 

The fields within the Debug Status Register, DR6 are as 
follows. 

Bi (Debug Fault/Trap Due to Breakpoint 0-3) 

Four breakpoint indicator flags, B3-B0, correspond 
one-to-one with the breakpoint registers in DR3-DR0. A 
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flag Bi is set when the condition described by DRi, LENi, 
and RWi occurs. 

If Gi or Li is set, and if the breakpoint is detected, the 
processor will invoke the Exception 1 handler. The ex- 
ception is handled as a fault if an instruction execution 
breakpoint occurred or as a trap if a data breakpoint 
occurred. 

Important Note: A flag, Bi, is set whenever the hard- 
ware detects a match condition on enabled breakpoint i. 
Whenever a match is detected on at least one enabled 
breakpoint i, the hardware immediately sets all Bi bits 
corresponding to breakpoint conditions matching at that 
instant, whether enabled or not. Therefore, the Excep- 
tion 1 handler may see that multiple Bi bits are set, but 
only set Bi bits corresponding to enabled breakpoints (Li 
or Gi set) are true indications of why the Exception 1 
handler was invoked. 

BD (Debug Fault Due to Attempted Register Access 
When GD Bit Set) 

This bit is set if the Exception 1 handler was invoked due 
to an instruction attempting to read or write to the debug 
registers when GD bit was set. If such an event occurs, 
then the GD bit is automatically cleared when the Ex- 
ception 1 handler is invoked, allowing handler access to 
the debug registers. 

BS (Debug Trap Due to Single-Step) 

This bit is set if the Exception 1 handler was invoked due 
to the TF bit in the flag register being set (for single- 
stepping). See Section Single-Step Trap. 

BT (Debug Trap Due to Task Switch) 

This bit is set if the Exception 1 handler was invoked 
due to a task switch occurring to a task having an 
Am386DX/DXL microprocessor TSS with the T-bit set. 



(See Figure 29.) Note the task switch into the new task 
occurs normally, but before the first instruction of the 
task is executed, the Exception 1 handler is invoked. 
With respect to the task switch operation, the operation 
is considered to be a trap. 

Use of Resume Flag (RF) In Flag Register 

The Resume Flag (RF) in the flag word can suppress an 
instruction execution breakpoint when the Exception 1 
handler returns to a user program at a user address that 
is also an instruction execution breakpoint. See Section 
Flags Register. 

REAL MODE ARCHITECTURE 

Real Mode Introduction 

When the processor is reset or powered up, it is initial- 
ized in Real Mode. Real Mode has the same base archi- 
tecture as the 8086, but allows access to the 32-bit 
register set of the Am386DX/DXL microprocessor. The 
addressing mechanism, memory size, and interrupt 
handling are all identical to the Real Mode on the 80286. 

All of the Am386DX/DXL microprocessor instructions 
are available in Real Mode (except those instructions 
listed in Protection and I/O Permission Bitmap). The de- 
fault operand size in Real Mode is 1 6 bits, just like the 
8086. In order to use the 32-bit registers and addressing 
modes, override prefixes must be used. In addition, the 
segment size on the Am386DX/DXL CPU in Real Mode 
is 64 Kb so 32-bit effective addresses must have a value 
less than 0000FFFFH. The primary purpose of Real 
Mode is to set up the processor for Protected Mode 
Operation. 



15 



Offset 



19 



Segment Selector 



Max Limit 
Fixed At 64K In 
Real Mode 



0000 



^ 



Memory Operand 



Segment Base 




Selected 
Segment 



15021B-017 



Figure 14. Real Address Mode Addressing 
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LOCK Operation 

The LOCK prefix on the Am386DX/DXL microproces- 
sor, even in Real Mode, is more restrictive than on the 
80286. This is due to the addition of paging on the 
Am386DX/DXL CPU in Protected Mode and Virtual 
8086 Mode. Paging makes it impossible to guarantee 
that repeated string instructions can be LOCKed. The 
Am386DX/DXL CPU cannot require that all pages hold- 
ing the string be physically present in memory. Hence, a 
Page Fault (Exception 1 4) might have to be taken during 
the repeated string instruction. Therefore the LOCK 
prefix cannot be supported during repeated string 
instructions. 

These are the only instruction forms where the LOCK 
prefix is legal on the Am386DX/DXL microprocessor. 



Opcode 


Operands 
(Dest, Source) 


BIT TEST and 

SET/RESET/COMPLEMENT 


Mem, Reg/immed 


XCHG 
XCHG 


Reg, Mem 
Mem, Reg 


ADD, OR, ADC, SBB, AND, SUB, XOR 


Mem, Reg/immed 


NOT, NEG, INC, DEC 


Mem 



An Exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or op-code not listed 
above. The LOCK prefix allows indivisible read/modify/ 
write operations on memory operands using the instruc- 
tions above. For example, even the ADD Reg, Mem is 
not LOCKable, because the Mem operand is not the 
destination (and therefore no memory read/modify/ 
operation is being performed). 

Since, on the Am386DX/DXL microprocessor, repeated 
string instructions are not LOCKable, it is not possible 
to LOCK the bus for a long period of time. Therefore, the 
LOCK prefix is not lOPL-sensitive on the Am386DX/ 
DXL device. The LOCK prefix can be used at any privi- 
lege level, but only on the instruction forms listed above. 

Memory Addressing 

In Real Mode, the maximum memory size is limited to 
1 Mb. Thus, only address lines A19-A2 are active. 



Exception, the High address lines A31-A20 are 
High during CS-relative memory cycles until an inter- 
segment jump or call is executed (see Section Reset 
and Initialization). 

Since paging is not allowed in Real Mode, the linear ad- 
dresses are the same as physical addresses. Physical 
addresses are formed in Real Mode by adding the 
contents of the appropriate segment register that is 
shifted left by 4 bits to an effective address. This addition 
results in a physical address from 00000000H to 
001 OFFEFH. This is compatible with 80286 Real Mode. 
Since segment registers are shifted left by 4 bits, this im- 
plies that Real Mode segments always start on 16-byte 
boundaries. 

All segments in Real Mode are exactly 64-Kb long and 
may be read, written, or executed. The Am386DX/DXL 
microprocessor will generate an Exception 13 if a data 
operand or instruction fetch occurs past the end of a 
segment (i.e., if an operand has an offset greater than 
FFFFH; for example, a word with a low byte at FFFFH 
and the high byte at 0000H). 

Segments may be overlapped in Real Mode. Thus, if a 
particular segment does not use all 64 Kb, another seg- 
ment c an be overlayed on top of the unused portion of 
the previous segment. This allows the programmer to 
minimize the amount of physical memory needed for a 
program. 

Reserved Locations 

There are two fixed areas in memory that are reserved in 
Real address mode: system initialization area and the 
interrupt table area. Locations 00000H through 003FFH 
are reserved for interrupt vectors. Each one of the 256 
possible interrupts has a 4-byte jump vector reserved 
for it. Locations FFFFFFFOH through FFFFFFFFH are 
reserved for system initialization. 

Interrupts 

Many of the exceptions shown in Table 5 and discussed 
in Section Interrupts are not applicable to Real Mode op- 
eration; in particular, Exceptions 10,11, and 14 will not 
happen in Real Mode. Other exceptions have slightly 
different meanings in Real Mode. Table 8 identifies 
these exceptions. 



Table 8. Other Exceptions in Real Mode 



Function 


Interrupt 
Number 


Related Instructions 


Return Address Location 


Interrupt table limit too small 


8 


INT Vector is not within table limit. 


Before Instruction 


CS, DS, ES, FS, GS 
Segment overrun exception 


13 


Word memory reference 
beyond offset = FFFFH. 
An attempt to execute 
past the end of CS segment. 


Before Instruction 


SS Segment overrun exception 


12 


Stack Reference 
beyond offset = FFFFH. 


Before Instruction 
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Shutdown and Halt 

The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, FLT, INTR with interrupts en- 
abled (IF = 1), or RESET will force the Am386DX/DXL 
microprocessor out of halt. If interrupted, the saved 
CS:IP will point to the next instruction after the HLT. 

Shutdown will occur when a severe error is detected that 
prevents further processing. In Real Mode, shutdown 
can occur under two conditions: 

• An interrupt or an exception occur (Exception 8 or 
13) and the interrupt vector is larger than the 
Interrupt Descriptor Table (i.e., there is not an 
interrupt handler for the interrupt); 

• A CALL, INT, or PUSH instruction attempts to wrap 
around the stack segment when SP is not even (e.g., 
pushing a value on the stack when SP = 0001 
resulting in a stack segment greater than FFFFH). 

An NMI input can bring the processor out of shutdown if 
the Interrupt Descriptor Table limit is large enough to 
contain the NMI interrupt vector (at least 001 7H) and the 
stack has enough room to contain the vector and flag in- 
formation (i.e., SP is greater than 0005H). Otherwise 
shutdown can only be exited via the RESET input. 

PROTECTED MODE ARCHITECTURE 

Introduction 

The complete capabilities of the Am386DX/DXL micro- 
processor are unlocked when the processor operates in 
Protected Virtual Address Mode (Protected Mode). 
Protected Mode vastly increases the linear address 
space to 4 Gb (2 32 bytes) and allows the running of vir- 
tual memory programs of almost unlimited size (64 tb or 
2 46 bytes). In addition, Protected Mode allows the 
Am386DX/DXL CPU to run all of the existing 8086 and 
80286 software, while providing a sophisticated mem- 
ory management and a hardware-assisted protection 
mechanism. Protected Mode allows the use of addi- 
tional instructions especially optimized for supporting 
multitasking operating systems. The base architecture 
of the Am386DX/DXL CPU remains the same; the regis- 
ters, instructions, and addressing modes described in 



the previous sections are retained. The main differ- 
ences between Protected Mode and Real Mode from a 
programmer's view is the increased address space and 
a different addressing mechanism. 

Addressing Mechanism 

Like Real Mode, Protected Mode uses two components 
to form the logical address: a 16-bit selector is used to 
determine the linear base address of a segment; the 
base address is added to a 32-bit effective address to 
form a 32-bit linear address. The linear address is then 
either used as the 32-bit physical address or if paging is 
enabled the paging mechanism maps the 32-bit linear 
address into a 32-bit physical address. 

The difference between the two modes lies in calculat- 
ing the base address. In Protected Mode, the selector is 
used to specify an index into an operating system de- 
fined table (see Figure 1 5). The table contains the 32-bit 
base address of a given segment. The physical address 
is formed by adding the base address obtained from the 
table to the offset. 

Paging provides an additional memory management 
mechanism that operates only in Protected Mode. Pag- 
ing provides a means of managing the very large seg- 
ments of the Am386DX/DXL microprocessor. As such, 
paging operates beneath segmentation. The paging 
mechanism translates the protected linear address that 
comes from the segmentation unit into a physical ad- 
dress. Figure 16 shows the complete Am386DX/DXL 
device addressing mechanism with paging enabled. 

Segmentation 
Segmentation Introduction 

Segmentation is one method of memory management 
and provides the basis for protection. Segments are 
used to encapsulate regions of memory that have com- 
mon attributes. For example, all of the code of a given 
program could be contained in a segment or an operat- 
ing system table may reside in a segment. All informa- 
tion about a segment is stored in an 8-byte data struc- 
ture called a descriptor. All of the descriptors in a system 
are contained in tables recognized by hardware. 
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Terminology 

The following terms are used throughout the discussion 
of descriptors, privilege levels, and protection: 

PL: Privilege Level — One of the four hierarchical privi- 
lege levels. Level is the most privileged level and level 
3 is the least privileged. More privileged levels are nu- 
merically smaller than less privileged levels. 

RPL: Requester Privilege Level — The privilege level of 
the original supplier of the selector. RPL is determined 
by the least two significant bits of a selector. 

DPL: Descriptor Privilege Level — This is the least privi- 
leged level at which a task may access that descriptor 
(and the segment associated with that descriptor). De- 
scriptor Privilege Level is determined by bits 6-5 in the 
Access Right Byte of a descriptor. 

CPL: Current Privilege Level— The privilege level at 
which a task is currently executing, which equals the 
privilege level of the code segment being executed. CPL 
can also be determined by examining the lowest 2 bits of 
the CS register, except for conforming code segments. 

EPL: Effective Privilege Level — The effective privilege 
level is the least privileged of the RPL and DPL. Since 
small privilege level values indicate greater privilege, 
EPL is the numerical maximum of RPL and DPL. 

Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 

Descriptor Tables 

Descriptor Tables Introduction 

The descriptor tables define all of the segments which 
are used in an Am386DX/DXL microprocessor system. 



There are three types of tables on the Am386DX/DXL 
microprocessor that hold descriptors: the Global De- 
scriptor Table, Local Descriptor Table, and the Interrupt 
Descriptor Table. All of the tables are variable length 
memory arrays. They can range in size between 8 bytes 
and 64 Kb. Each table can hold up to 8192 eight byte 
descriptors. The upper 13 bits of a selector are used as 
an index into the descriptor table. The tables have 
registers associated with them that hold the 32-bit 
linear base address, and the 16-bit limit of each table. 

Each of the tables has a register associated with it: the 
GDTR, LDTR, and the IDTR (see Figure 1 7). The LGDT, 
LLDT, and LIDT instructions load the base and limit of 
the Global, Local, and Interrupt Descriptor Tables, re- 
spectively, into the appropriate register. The SGDT, 
SLDT, and SIDT instructions store the base and limit 
values. These tables are manipulated by the operating 
system. Therefore, the load descriptor table instructions 
are privileged instructions. 

Global Descriptor Table 

The Global Descriptor Table (GDT) contains descriptors 
that are possibly available to all of the tasks in a system. 
The GDT can contain any type of segment descriptor 
except for descriptors that are used for servicing inter- 
rupts (i.e., interrupt and trap descriptors). Every 
Am386DX/DXL microprocessor contains a GDT. Gen- 
erally, the GDT contains code and data segments used 
by the operating systems and task state segments and 
descriptors for the LDTs in a system. 

The first slot of the Global Descriptor Table corresponds 
to the null selector and is not used. The null selector 
defines a null pointer value. 
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Figure 17. Descriptor Table Registers 
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Local Descriptor Table 

LDTs contain descriptors that are associated with a 
given task. Generally, operating systems are designed 
so that each task has a separate LDT. The LDT may 
contain only code, data, stack, task gate, and call gate 
descriptors. LDTs provide a mechanism for isolating a 
given task's code and data segments from the rest of the 
operating system, while the GDT contains descriptors 
for segments that are common to all tasks. A segment 
cannot be accessed by a task if its segment descriptor 
does not exist in either the current LDT or the GDT. This 
provides both isolation and protection for a task's seg- 
ments, while still allowing global data to be shared 
among tasks. 

Unlike the 6-byte GDT or IDT registers that contain a 
base address and limit, the visible portion of the LDT 
register contains only a 1 6-bit selector. This selector re- 
fers to a Local Descriptor Table descriptor in the GDT. 

Interrupt Descriptor Table 

The third table needed for Am386DX/DXL microproces- 
sor systems is the Interrupt Descriptor Table (see Figure 
1 8) . The I DT contains the descriptors that point to the lo- 
cation of up to 256 interrupt service routines. The IDT 
may contain only task gates, interrupt gates, and trap 
gates. The IDT should be at least 256 bytes in size in 



order to hold the descriptors for the 32, Reserved for 
Future Use, interrupts. Every interrupt used by a system 
must have an entry in the IDT. The IDT entries are refer- 
enced via INT instructions, external interrupt vectors, 
and exceptions. (See Interrupts.) 

Descriptors 

Descriptor Attribute Bits 

The object to which the segment selector points is called 
a descriptor. Descriptors are 8-byte quantities that con- 
tain attributes about a given region of linear address 
space (i.e., a segment). These attributes include the 
32-bit base linear address of the segment, the 20-bit 
length and granularity of the segment, the protection 
level, read, write or execute privileges, the default size 
of the operands (16 bit or 32 bit), and the type of seg- 
ment. All of the attribute information about a segment is 
contained in 12 bits in the segment descriptor. Figure 19 
shows the general format of a descriptor. All segments 
on the Am386DX/DXL microprocessor have three at- 
tribute fields in common: the P bit, the DPL bit, and the S 
bit. The Present P bit is 1 if the segment is loaded in 
physical memory; if P = then any attempt to access this 
segment causes a not present exception (Exception 
11). The Descriptor Privilege Level (DPL) is a 2-bit field 
that specifies the protection levels 0-3 associated with a 
segment. 
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Base 31-24 



AVL 



Limit 
19-16 



Segment Limit 15-0 
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Base Base Address of the segment 

Limit The length of the segment 

P Present Bit: 1 = Present, = Not Present 

DPL Descriptor Privilege Levels 0-3 

S Segment Descriptor: 0= System Descriptor, 1 =Code or Data Segment Descriptor 

Type Type of Segment 

A Accessed Bit 

G Granularity Bit: 1 = Segment length is page granular, = Segment length is byte granular 

D Default Operation Size (recognized in code segment descriptors only): 1 = 32-bit segment, = 1 6-bit segment 

Bit must be zero (0) for compatibility with future processors 

AVL Available field for user or OS 



Note: In a maximum-size segment (i.e., segment with G = 1 and segment limit 19-0 = FFFFFH), the lowest 12 bits of 
the segment base should be zero (i.e., segment base 1 1-000 = 000H). 

Figure 19. General Format of Segment Descriptors 
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The Am386DX/DXL microprocessor has two main cate- 
gories of segments: system segments and non-system 
segments (for code and data). The segment S bit in the 
segment descriptor determines if a given segment is a 
system segment or a code or data segment. If the S bit is 
1 , then the segment is either a code or data segment; if it 
is 0, then the segment is a system segment. 

Am386DX/DXL Microprocessor Code and Data 
Descriptors (S = 1) 

Figure 20 shows the general format of a code and data 
descriptor and Table 9 illustrates how the bits in the 
Access Rights Byte are interpreted. 

Code and data segments have several descriptor fields 
in common. The accessed A bit is set whenever the 
processor accesses a descriptor. The A bit is used 
by operating systems to keep usage statistics on a 
given segment. The G bit, or granularity bit, specifies if 
a segment length is byte-granular or page-granular. 
Am386DX/DXL microprocessor segments can be 1 Mb 
long with byte granularity (G = 0) or 4 Gb with page 
granularity (G = 1), (i.e., 2 20 pages— each page is 4 Kb 
in length). The granularity is totally unrelated to paging. 
An Am386DX/DXL CPU system can consist of seg- 
ments with byte granularity and page granularity, 
whether or not paging is enabled. 



The executable E bit tells if a segment is a code or data 
segment. A code segment (E=1, S = 1) may be exe- 
cute-only or execute/read as determined by the Read 
R bit. Code segments are execute only if R = and exe- 
cute/read if R =1 . Code segments may never be written 
into. 

Note: Code segments may be modified via aliases. Aliases 
are writeable data segments that occupy the same range of 
linear address space as the code segment. 

The D bit indicates the default length for operands and 
effective addresses. If D = 1, then 32-bit operands 
and 32-bit addressing modes are assumed. If D = 0, 
then 16-bit operands and 16-bit addressing modes are 
assumed. Therefore all existing 80286 code segments 
will execute on the Am386DX/DXL microprocessor 
assuming the D bit is set 0. 

Another attribute of code segments is determined by the 
conforming C bit. Conforming segments, C = 1 , can be 
executed and shared by programs at different privilege 
levels (see Section Protection). 
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D/B 1 = Default Instructions Attributes are 32 bits 
= Default Instructions Attributes are 16 bits 
AVL Available field for user or OS 

G Granularity Bit: 1 = Segment length is page granular, = Segment length is byte granular 

Bit must be zero (0) for compatibility with future processors 

Note: In a maximum-size segment (i.e., a segment with G = 1 and segment limit 19-0 = FFFFFH), the lowest 1 2 bits of 
the segment base should be zero (i.e., segment base 1 1-000 = 000H). 

Figure 20. Code and Data Segment Descriptors 
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Table 9. Access Rights Byte Definition for Code and Data Descriptions 



Bit 
Position 


Name 


Function 


7 

6-5 
4 


Present (P) 

Descriptor Privilege 
Levels (DPL) 
Segment Descriptor (S) 


P = 1 Segment is mapped into physical memory. 

P = No mapping to physical memory exists, base and limit are 

not used. 

Segment privilege attribute used in privilege tests. 

S = 1 Code or Data (includes stacks) segment descriptor. 
S = System Segment Descriptor or Gate Descriptor. 


3 
2 

1 


Executable (E) 
Expansion Direction (ED) 

Writeable (W) 


E = Descriptor type is data segment. i 
ED = Expand up segment, offsets must be < limit. 
ED = 1 Expand down segment, offsets must be > limit. 
W = Data segment may not be written into. 
W = 1 Data segment may be written into. 


If Data 
Segment 
' (S = 1, 
E-0) 


3 
2 

1 


Executable (E) 
Conforming (C) 

Readable (R) 


E = 1 Descriptor type is code segment. . 
C = 1 Code segment may only be executed when 

CPL>DPL and CPL remains unchanged. 
R = Code segment may not be read. 
R = 1 Code segment may be read. 


If Code 
Segment 
" (S = 1, 
E = 1) 





Accessed (A) 


A = Segment has not been accessed. 
A= 1 Segment selector has been loaded into segment register 
or used by selector test instructions. 



Segments identified as data segments (E = 0, S = 1 ) are 
used for two types of Am386DX/DXL microprocessor 
segments: stack and data segments. The expansion 
direction (ED) bit specifies if a segment expands down- 
ward (stack) or upward (data). If a segment is a stack 
segment, all offsets must be greater than the segment 
limit. On a data segment all offsets must be less than or 
equal to the limit. In other words, stack segments start at 
the base linear address plus the maximum segment limit 
and grow down to the base linear address plus the limit. 
On the other hand, data segments start at the base 
linear address and expand to the base linear address 
plus limit. 



The write (W) bit controls the ability to write into a seg- 
ment. Data segments are read-only if W = 0. The stack 
segment must have W = 1 . 

The B bit controls the size of the stack pointer register. If 
B = 1 , then PUSHes, POPs, and CALLs all use the 32-bit 
ESP register for stack references and assume an upper 
limit of FFFFFFFFH. If B = 0, stack instructions all use 
the 16-bit SP register and assume an upper limit of 
FFFFH. 

System Descriptor Formats 

System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 21 shows 
the general format of system segment descriptors, and 
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the various types of system segments. The Am386DX/ 
DXL microprocessor system descriptors contain a 
32-bit base linear address and a 20-bit segment limit. 
80286 system descriptors have a 24-bit base address 
and a 16-bit segment limit. 80286 system descriptors 
are identified by the upper 16 bits being all zeros. 

LDT Descriptors (S = 0, Type = 2) 

LDT descriptors (S = 0, TYPE = 2) contain information 
about Local Descriptor Tables. LDTs contain a table of 
segment descriptors, unique to a particular task. Since 
the instruction to load the LDTR is only available at privi- 
lege level 0, the DPL field is ignored. LDT descriptors 
are only allowed in the Global Descriptor Table (GDT). 

TSS Descriptors (S = 0, Type = 1, 3, 9, B) 

A Task State Segment (TSS) descriptor contains infor- 
mation about the location, size, and privilege level of a 
TSS. A TSS in turn is a special fixed format segment that 
contains all the state information for a task and a linkage 
field to permit nesting tasks. The Type field is used to in- 
dicate whether the task is currently BUSY (i.e., on a 
chain of active tasks) or the TSS is available. The Type 
field also indicates if the segment contains a 80286 or an 
Am386DX/DXL microprocessor TSS. The Task Regis- 
ter (TR) contains the selector that points to the current 
TSS. 

Gate Descriptors (S = 0, Type = 4-7, C, F) 

Gates are used to control access to entry points within 
the target code segment. The various types of gate de- 
scriptors are call gates, task gates, interrupt gates, and 
trap gates. Gates provide a level of indirection between 
the source and destination of the control transfer. This 
indirection allows the processor to automatically per- 
form protection checks. It also allows system designers 
to control entry points to the operating system. Call 
gates are used to change privilege levels (see Section 
Protection), task gates are used to perform a task 



switch, and interrupt and trap gates are used to specify 
interrupt service routines. 

Figure 22 shows the format of the four types of gate de- 
scriptors. Call gates are primarily used to transfer pro- 
gram control to a more privileged level. The call gate de- 
scriptor consists of three fields: the access byte; a long 
pointer (selector and offset) that points to the start of a 
routine; and a word count that specifies how many pa- 
rameters are to be copied from the caller's stack to the 
stack of the called routine. The word count field is only 
used by call gates when there is a change in the privi- 
lege level, other types of gates ignore the word count 
field. 

Interrupt and trap gates use the destination selector and 
destination offset fields of the gate descriptor as a point- 
er to the start of the interrupt or trap handler routines. 
The difference between interrupt gates and trap gates is 
that the interrupt gate disables interrupts (resets the IF 
bit) while the trap gate does not. 

Task gates are used to switch tasks. Task gates may 
only refer to a task state segment (see Section Task 
Switching); therefore, only the destination selector por- 
tion of a task gate descriptor is used, and the destination 
offset is ignored. 

Exception 13 is generated when a destination selector 
does not refer to a correct descriptor type, i.e., a code 
segment for an interrupt, trap or call gate, a TSS for a 
task gate. 

The access byte format is the same for all gate descrip- 
tors. P = 1 indicates that the gate contents are valid. 
P = indicates the contents are not valid and causes Ex- 
ception 1 1 if referenced. DPL is the descriptor privilege 
level and specifies when this descriptor may be used by 
a task (see Section Protection). The S field, bit 4 of the 
access rights byte, must be to indicate a system con- 
trol descriptor. The type field specifies the descriptor 
type as indicated in Figure 22. 
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Note: In a maximum-size segment (i.e., segment with G = 1 and segment limit 1 9-0 = FFFFFH), the lowest 1 2 bits 
of the segment base should be zero (i.e., segment base 1 1-000 = 000H). 

Figure 21 . System Segments Descriptors 
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Gate Descriptors Fields 
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Value 


Description 


Type 
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80286 Call Gate 
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Task Gate (for 80286 or Am386DX/DXL CPU Task) 




6 


80286 Interrupt Gate 
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DPL — Least privileged level at which a task may access the gate. WORD COUNT 0-31 — The number of parameters to copy 
from caller's stack to the called procedure's stack. The parameters are 32-bit quantities for Am386DX/DXL CPU gates, and 
1 6-bit quantities for 80286 gates. 
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Figure 22. Gate Descriptor Formats 



Difference Between Am386DX/DXL Microproces- 
sor and 80286 Descriptors 

In order to provide operating system compatibility be- 
tween the 80286 and Am386DX/DXL microprocessor, 
the Am386DX/DXL CPU supports all of the 80286 seg- 
ment descriptors. Figure 23 shows the general format of 
an 80286 system segment descriptor. The only differ- 
ences between 80286 and Am386DX/DXL device de- 
scriptor formats are that the values of the type fields and 
the limit and base address fields have been expanded 
for the Am386DX/DXL device. The 80286 system seg- 
ment descriptors contained a 24-bit base address and 
16-bit limit, while the Am386DX/DXL microprocessor 
system segment descriptors have a 32-bit base ad- 
dress, a 20-bit limit field, and a granularity bit. 

By supporting 80286 system segments, the Am386DX/ 
DXL microprocessor is able to execute 80286 appli- 
cation programs on an Am386DX/DXL CPU operating 
system. This is possible because the processor 
automatically understands which descriptors are 
80286-style descriptors and which are Am386DX/DXL 
microprocessor-style descriptors. In particular, if the 
upper word of a descriptor is zero, then that descriptor 
is an 80286-style descriptor. 



The only other differences between 80286-style de- 
scriptors and Am386DX/DXL microprocessor descrip- 
tors is the interpretation of the word count field of call 
gates and the B bit. The word count field specifies the 
number of 1 6-bit quantities to copy for 80286 call gates 
and 32-bit quantities for Am386DX/DXL device call 
gates. The B bit controls the size of PUSHes when using 
a call gate; if B = 0, then PUSHes are 16 bits, if B = 1, 
then PUSHes are 32 bits. 

Selector Fields 

A selector in Protected Mode has three fields: Local or 
Global Descriptor Table Indicator (Tl), Descriptor Entry 
Index (Index), and Requestor (the selector's) Privilege 
Level (RPL) as shown in Figure 24. The Tl bits select 
one of two memory-based tables of descriptors (the 
Global Descriptor Table or the Local Descriptor Table). 
The Index selects one of 8K descriptors in the appropri- 
ate descriptor table. The RPL bits allow high speed test- 
ing of the selector's privilege attributes. 

Segment Descriptor Cache 

In addition to the selector value, every segment register 
has a segment descriptor cache register associated 
with it. Whenever a segment register's contents are 
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changed, the 8-byte descriptor associated with that 
selector is automatically loaded (cached) on the chip. 
Once loaded, all references to that segment use the 
cached descriptor information instead of reaccessing 
the descriptor. The contents of the descriptor cache are 



not visible to the programmer. Since descriptor caches 
only change when a segment register is changed, 
programs that modify the descriptor tables must reload 
the appropriate segment registers after changing a 
descriptor's value. 
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Figure 23. 80286 Code and Data Segment Descriptors 
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Segment Descriptor Register Settings 

The contents of the segment descriptor cache vary de- 
pending on the operating mode of the Am386DX/DXL 
microprocessor. When operating in Real Address 
Mode, the segment base, limit, and other attributes 
within the segment cache registers are defined as 
shown in Figure 25. 

For compatibility with the 8086 architecture, the base is 
set to 16 times the current selector value, the limit is 
fixed at 0000FFFFH, and the attributes are fixed to 



indicate that the segment is present and fully usable. In 
Real Address Mode, the internal privilege level is always 
fixed to the highest level, level 0, so I/O and other privi- 
leged op-codes may be executed. 

When operating in Protected Mode, the segment base, 
limit, and other attributes within the segment cache reg- 
isters are defined as shown in Figure 26. In Protected 
Mode, each of these fields are defined according to the 
contents of the segment descriptor indexed by the se- 
lector value loaded into the segment register. 



Segment Descriptor Cache Register Contents 



32-Bit Base 
(Updated During Selector 32-Bit Limit 

Load into Segment Register) (Fixed) 



Other Attributes 
(Fixed) 



Conforming Privilege - 

Stack Size — 

Executable - 

Writeable - 

Readable 



Expansion Direction 
Granularity — 

Accessed — — 

Privilege Level — — 

Present 



BASE 



LIMIT 



cs 


16X Current CS Selector* 


0000FFFFH 


Y 





Y 


B 


U 


Y 


Y 


Y 


_ 


N 


ss 


16X Current SS Selector 


0000FFFFH 


Y 





Y 


B 


U 


Y 


Y 


N 


W 


- 


DS 


1 6X Current DS Selector 


0000FFFFH 


Y 





Y 


B 


U 


Y 


Y 


N 


- 


- 


ES 


1 6X Current ES Selector 


0000FFFFH 


Y 





Y 


B 


U 


Y 


Y 


N 


- 


- 


FS 


1 6X Current FS Selector 


0000FFFFH 


Y 
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U 


Y 


Y 


N 


- 


- 


GS 


1 6X Current GS Selector 


0000FFFFH 


Y 





Y 


B 


U 


Y 


Y 


N 


- 


- 



Key: 



Yes 

No 

Privilege level 

Privilege level 1 

Privilege level 2 

Privilege level 3 

Expand up 



D = Expand down 

B = Byte granularity 

P = Page granularity 

W = Push/pop 1 6-bit words 

F = Push/pop 32-bit Dwords 

- = Does not apply to that segment cache register 



*Except the 32-bit CS base is initialized to FFFFF000H after reset until first intersegment control transfer (e.g., intersegment CALL, c 
intersegment JMP, or INT). (See Figure 27 example.) 



Figure 25. Segment Descriptor Caches for Real Address Mode 
(Segment Limit and Attributes are Fixed) 
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Segment Descriptor Cache Register Contents 



32-Bit Base 

(Updated During Selector 

Load into Segment Register) 
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P 


d 


d 


d 


d 


d 


N 


Y 


_ 


d 


ss 


Base per Seg Descr 


Limit per Seg Descr 


P 


d 


d 


d 


d 


r 


w 


N 


d 


- 


DS 


Base per Seg Descr 


Limit per Seg Descr 


P 


d 


d 


d 


d 


d 


d 


N 


- 


- 


ES 


Base per Seg Descr 


Limit per Seg Descr 


P 


d 


d 


d 


d 


d 


d 


N 


- 


- 


FS 


Base per Seg Descr 


Limit per Seg Descr 


P 


d 


d 


d 


d 


d 


d 


N 


- 


- 


GS 


Base per Seg Descr 


Limit per Seg Descr 


P 


d 


d 


d 


d 


d 


d 


N 


- 


- 



Key: Y = Fixed Yes 

N = Fixed No 

d = Per segment descriptor 

p = Per segment descriptor; descriptor must indicate "present" to avoid Exception 1 1 (Exception 12 in case of SS) 

r = Per segment descriptor, but descriptor must indicate "readable" to avoid Exception 13 (special case for SS) 

w = Per segment descriptor, but descriptor must indicate "writeable" to avoid Exception 13 (special case for SS) 

- = Does not apply to that segment cache register 
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Figure 26. Segment Descriptor Caches for Protected Mode (Loaded per Descriptor) 



When operating in a Virtual 8086 Mode within the Pro- 
tected Mode, the segment base, limit, and other attrib- 
utes within the segment cache registers are defined 
as shown in Figure 27. For compatibility with the 8086 
architecture, the base is set to 16 times the current 
selector value, the limit is fixed at 0000FFFFH, and the 



attributes are fixed so as to indicate the segment 
is present and fully usable. The virtual program exe- 
cutes at lowest privilege level, level 3, to allow trapping 
of all lOPL-sensitive instructions and level only 
instructions. 
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Segment Descriptor Cache Register Contents 



Key: 



32-Bit Base 

(Updated During Selector 

Load into Segment Register) 



32-Bit Limit 
(Fixed) 



Other Attributes 
(Fixed) 



Conforming Privilege - 

Stack Size 

Executable 

Writeable 

Readable 



Expansion Direction 

Granularity 

Accessed 

Privilege Level 

Present 



BASE 



LIMIT 



1 



Yes 
No 



= Privilege level 



1 
2 
3 
U 



Privilege level 1 
Privilege level 2 
Privilege level 3 
Expand up 



D = Expand down 

B = Byte granularity 

P = Page granularity 

W = Push/pop 1 6-bit words 

F = Push/pop 32-bit Dwords 

- = Does not apply to that segment cache register 



cs 


16X Current CS Selector 


0000FFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


Y 


_ 


N 


ss 


16X Current SS Selector 


OOOOFFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


N 


W 


- 


DS 


16X Current DS Selector 


0000FFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


N 


- 


- 


ES 


16X Current ES Selector 


OOOOFFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


N 


- 


- 


FS 


16X Current FS Selector 


OOOOFFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


N 


- 


- 


GS 


16X Current GS Selector 


OOOOFFFFH 


Y 


3 


Y 


B 


U 


Y 


Y 


N 


- 


- 



Figure 27. Segment Caches for Virtual 8086 Mode within Protected Mode 
(Segment Limit and Attributes are Fixed) 
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Protection 
Protection Concepts 

The Am386DX/DXL microprocessor has four levels of 
protection that are optimized to support the needs of a 
multitasking operating system to isolate and protect 
user programs from each other and the operating sys- 
tem. The privilege levels control the use of privileged in- 
structions, I/O instructions, and access to segments and 
segment descriptors. Unlike traditional microprocessor 
based systems where this protection is achieved only 
through the use of complex external hardware and soft- 
ware, the Am386DX/DXL CPU provides the protection 
on a page basis when paging is enabled (see Section 
Page Level Protection). 

The four-level hierarchical privilege system is illustrated 
in Figure 28. It is an extension of the user/supervisor 
privilege mode commonly used by minicomputers and, 
in fact, the user/supervisor mode is fully supported by 
the Am386DX/DXL microprocessor paging mechanism. 
The privilege levels (PL) are numbered through 3. 
Level is the most privileged or trusted level. 




High Speed 
Operating 
System 
Interface 



15021 B-031 



Figure 28. Four-Level Hierarchical Protection 

Rules of Privilege 

The Am386DX/DXL microprocessor controls access to 
both data and procedures between levels of a task, ac- 
cording to the following rules. 

• Data stored in a segment with privilege level p can be 
accessed only by code executing at a privilege level 
at least as privileged as p. 

• A code segment/procedure with privilege level p can 
only be called by a task executing at the same or a 
lesser privilege level than p. 
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Privilege Levels 

Task Privilege 

At any point in time, a task on the Am386DX/DXL micro- 
processor always executes at one of the four privilege 
levels. The Current Privilege Level (CPL) specifies the 
task's privilege level. A task's CPL may only be changed 
by control transfers through gate descriptors to a code 
segment with a different privilege level (see Section 
Privilege Level Transfers). Thus, an application pro- 
gram running at PL = 3 may call an operating system 
routine at PL = 1 (via a gate) that would cause the task's 
CPL to be set to 1 until operating system routine is 
finished. 

Selector Privilege (RPL) 

The privilege level of a selector is specified by the RPL 
field. The RPL is the two least significant bits of the se- 
lector. The selector's RPL is only used to establish a 
less trusted privilege level than the current privilege 
level for the use of a segment. This level is called the 
task's effective privilege level (EPL). The EPL is defined 
as being the least privileged (i.e., numerically larger) 
level of a task's CPL and a selector's RPL. Thus, if se- 
lector's RPL = 0, then the CPL always specifies the privi- 
lege level for making an access using the selector. On 
the other hand if RPL = 3, then a selector can only ac- 
cess segments at level 3 regardless of the task's CPL. 
The RPL is most commonly used to verify that pointers 
passed to an operating system procedure do not access 
data that is of higher privilege than the procedure that 
originated the pointer. Since the originator of a selector 
can specify any RPL value, the Adjust RPL (ARPL) in- 
struction is provided to force the RPL bits to the 
originator's CPL. 

I/O Privilege and I/O Permission Bitmap 

The I/O privilege level (IOPL, a 2-bit field in the EFLAGS 
register) defines the least privileged level at which 
I/O instructions can be unconditionally performed. I/O 
instructions can be unconditionally performed when 
CPL< IOPL. (The I/O instructions are IN, OUT, INS, 
OUTS, REP INS, and REP OUTS.) When CPL > IOPL, 
and the current task is associated with a 286 TSS, at- 
tempted I/O instructions cause an Exception 13 fault. 
When CPL > IOPL, and the current task is associated 
with an Am386DX/DXL CPU TSS, the I/O Permission 
Bitmap (part of an Am386DX/DXL microprocessor TSS) 
is consulted on whether I/O to the port is allowed, or an 
Exception 13 fault is to be generated instead. For dia- 
grams of the I/O Permission Bitmap, refer to Figures 
29a and 29b. Forfurther information on how the I/O Per- 
mission Bitmap is used in Protected Mode or in Virtual 
8086 Mode, refer to Section Protection and I/O Permis- 
sion Bitmap. 
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Note: 
BIT_MAP_OFFSET 
must be £ DFFFH 



Access 
Rights 



TSS 
Limit 



BASE 



31 Program ° 
Invisible 



Task Register 
TRI Selector 



15 



31 


16 


15 







0000000000000000 


Back Link 


ESPO 


0000000000000000 


SSO 


ESP1 


0000000000000000 


SS1 


ESP2 


0000000000000000 


SS2 


CR3 


EIP 


EFLAGS 


EAX 


ECX 


EDX 


EBX 


ESP 


EBP 


ESI 


EDI 


0000000000000000 


ES 


0000000000000000 


CS 


0000000000000000 


SS 


0000000000000000 


DS 


0000000000000000 


FS 


0000000000000000 


GS 


0000000000000000 


LDT 


BIT_MAP_OFFSET(15-0) 


0000000000000000 


T • 


Available 


\ 


* 







4 

8 

C 

10 

14 

18 

1C 

20 

24 

28 

2C 

30 

34 

38 

3C 

40 

44 

48 

4C 

50 

54 

58 

5C 
60 
64 



TSS 



Stacks 
for 
► CPL 
0,1,2 



Current 
"Task 



System Status, etc. 
in Am386DX/DXL CPU TSS 



31 



24 



63 



56 



95 



23 



16 



55 



48 



87 



80 



15 



47 



40 



79 



72 



L 68 



32 



OjW 

BIT MAP OFFSET 



71 



64 






.DEBUG 

TRAP 

BIT 



OFFSET +C 
OFFSET+10 



cy 









65407 


I/O Permission Bitmap 

(One Bit per Byte I/O 

Port. Bitmap may be 

Truncated using TSS Limit.) 




65439 




65471 




65503 


65472 


65535 


I 


65504 






FFH 



OFFSET +1FEC 
OFFSET +1FF0 
OFFSET +1FF4 
OFFSET +1FF8 
OFFSET +1FFC 
OFFSET + 2000 



31 



Am386DX/DXL CPU TSS Descriptor (In GDT) 



TSS Limit = OFFSET + 2000H 



Type = 9: Available 
Am386DX/DXL CPU TSS, 
Type = B: Busy 
Am386DX/DXL CPU TSS 



Selector Base 15-0 



Base 31-24 



Limit 
19-16 



Segment Limit 15-0 



DPL 



i3Ll 



23-16 



Figure 29a. TSS and TSS Registers 
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3130 29 28 27 26 25 24 23 22 21 20 19 18 17 16 


15 14 13 12 11 10 9 8 


7 6 5 4 3 2 10 




31 


11110 110 


1111 


10 1 10 


11 




63 


10 1 1 


110 10 10 


1111110 


111 110 1 




95 


11111111 


11111111 


11111111 


111 11111 




127 


00000000 


00000000 


0000000 


000 00000 
111 11111 




I 









I/O Ports Accessible: 2 -> 9, 12, 13, 15, 20 -> 24, 27, 33, 34, 40, 41 , 48, 50, 52, 53, 58 -> 60, 62, 63, 96 -> 127 

15021B-O32b 

Figure 29b. Sample I/O Permission Bit Map 



The I/O privilege level (IOPL) also affects whether 
several other instructions can be executed or cause an 
Exception 1 3 fault instead. These instructions are called 
lOPL-sensitive instructions and they are CLI and STI. 
(Note that the LOCK prefix is not lOPL-sensitive on the 
Am386DX/DXL microprocessor.) 

The IOPL also affects whether the IF bit (interrupts en- 
able flag) can be changed by loading a value into the 
EFLAGS register. When CPL<IOPL, the IF bit can be 
changed by loading a new value into the EFLAGS regis- 
ter. When CPL > IOPL, the IF bit cannot be changed by a 
new value POP'ed into (or otherwise loaded into) the 
EFLAGS register; the IF bit merely remains unchanged 
and no exception is generated. 

Table 10. Pointer Test Instructions 



Instruction Operands Function 



ARPL Selector, Adjust Requested Privilege 

Register Level; adjusts the RPL of the 

selector to the numeric maximum 
of current selector RPL value and 
the RPL value in the register. Set 
zero flag if selector RPL was 
changed. 



VERR Selector VERify for Read: sets the zero 
flag if the segment referred to 
by the selector can be read. 



VERW Selector VERify for Write: sets the zero 

flag if the segment referred to 

by the selector can be written. 



LSL Register, Load Segment Limit: reads the 

Selector segment limit into the register if 
privilege rules and descriptor 
type allow. Set zero flag if 
successful. 



LAR Register, Load Access Rights: reads the 

Selector descriptor access rights byte into 
the register if privilege rules allow. 
Set zero flag if successful. 



Privilege Validation 

The Am386DX/DXL CPU provides several instructions 
to speed pointer testing and help maintain system 
integrity by verifying that the selector value refers to an 



appropriate segment. Table 10 summarizes the selec- 
tor validation procedures available for the Am386DX/ 
DXL microprocessor. 

This pointer verification prevents the common problem 
of an application at PL = 3 calling an operating-systems 
routine at PL = and passing the operating-systems 
routine a bad pointer that corrupts a data structure 
belonging to the operating system. If the operating- 
systems routine uses the ARPL instruction to ensure 
that the RPL of the selector has no greater privilege 
than that of the caller, then this problem can be avoided. 

Descriptor Access 

There are basically two types of segment accesses: 
those involving code segments, such as control trans- 
fers; and those involving data accesses. Determining 
the ability of a task to access a segment involves the 
type of segment to be accessed, the instruction used, 
the type of descriptor used, and CPL, RPL, and DPL as 
described above. 

Any time an instruction loads data segment registers 
(DS, ES, FS, GS) the Am386DX/DXL microprocessor 
makes protection validation checks. Selectors loaded in 
the DS, ES, FS, GS registers must refer only to data 
segments or readable code segments. The data access 
rules are specified in Section Rules of Privilege. The 
only exception to those rules is readable conforming 
code segments which can be accessed at any privilege 
level. 

Finally, the privilege validation checks are performed. 
The CPL is compared to the EPL; if the EPL is more 
privileged than the CPL, an Exception 13 (General Pro- 
tection fault) is generated. 

The rules regarding the stack segment are slightly differ- 
ent than those involving data segments. Instructions 
that load selectors into SS must refer to data segment 
descriptors for writeable data segments. The DPL and 
RPL must equal the CPL. All other descriptor types or a 
privilege level violation will cause Exception 1 3. A stack 
not present fault causes Exception 12. Note that an 
Exception 1 1 is used for a not-present code or data 
segment. 
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Table 11. Descriptor Types Used for Control Transfer 



Control Transfer Types 


Operation Types 


Descriptor 
Referenced 


Descriptor 
Table 


Intersegment within the same privilege level 


JMP, CALL, RET, IRET* 


Code Segment 


GDT/LDT 


Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 


CALL 


Call Gate 


GDT/LDT 


Interrupt Instruction, 
Exception, External Interrupt 


Trap or Interrupt 
Gate 


IDT 


Intersegment to a lower privilege level (change task CPL) 


RET, IRET* 


Code Segment 


GDT/LDT 




CALL, JMP 


Task State Segment 


GDT 


Task Switch 


CALL, JMP 


Task Gate 


GDT/LDT 


IRET**, Interrupt Instruction, 
Exception, External Interrupt 


Task Gate 


IDT 



*NT (Nested Task bit of flag register) = **NT (Nested Task bit of flag register) = 1 



Privilege Level Transfers 

Intersegment control transfers occur when a selector is 
loaded in the CS register. For a typical system most of 
these transfers are simply the result of a call or a jump to 
another routine. There are five types of control transfers, 
which are summarized in Table 1 1 . 

Many of these transfers result in a privilege level trans- 
fer. Changing privilege levels is done only via control 
transfers by using gates, task switches, and interrupt or 
trap gates. 

Control transfers can only occur if the operation that 
loaded the selector references the correct descriptor 
type. Any violation of these descriptor usage rules will 
cause an Exception 1 3 (e.g., JMP through a call gate or 
IRET from a normal subroutine call). 

In order to provide further system security, all control 
transfers are also subject to the privilege rules. 

The privilege rules require that: 

— Privilege level transitions can only occur via gates. 

— JMPs can be made to a non-conforming code 
segment with the same privilege or to a conforming 
code segment with greater or equal privilege. 

— CALLs can be made to a non-conforming code 
segment with the same privilege or via a gate to a 
more privileged level. 

— Interrupts handled within the task obey the same 
privilege rules as CALLs. 

— Conforming Code segments are accessible by 
privilege levels that are the same or less privileged 
than the conforming-code segment's DPL. 

— Both the requested privilege level (RPL) in the 
selector pointing to the gate and the task's CPL must 
be of equal or greater privilege than the gate's DPL. 



— The code segment selected in the gate must be the 
same or more privileged than the task's CPL. 

— Return instructions that do not switch tasks can only 
return control to a code segment with same or less 
privilege. 

— Task switches can be performed by a CALL, JMP, or 
INT that references either a task gate or task state 
segment whose DPL is less privileged or the same 
privilege as the old task's CPL. 

Any control transfer that changes CPL within a task 
causes a change of stacks as a result of the privilege 
level change. The initial values of SS:ESP for privilege 
levels 0, 1 , and 2 are retained in the task state segment 
(see Section Task Switching). During a JMP or CALL 
control transfer, the new stack pointer is loaded in the 
SS and ESP registers and the previous stack pointer is 
pushed onto the new stack. 

When returning to the original privilege level, use of the 
lower-privilege stack is restored as part of the RET or 
IRET instruction operation. For subroutine calls that 
pass parameters on the stack and cross privilege levels, 
a fixed number of words (as specified in the gate's word 
count field) are copied from the previous stack to the 
current stack. The intersegment RET instruction with a 
stack adjustment value will correctly restore the previ- 
ous stack pointer upon return. 

Call Gates 

Gates provide protected, indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all the gates in a system, it can 
ensure that all gates only allow entry into a few trusted 
procedures (such as those that allocate memory or per- 
form I/O). 
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Gate descriptors follow the data access rules of privi- 
lege; that is, gates can be accessed by a task if the EPL 
is equal to or more privileged than the gate descriptor's 
DPL. Gates follow the control transfer rules of privilege 
and therefore may only transfer control to a more privi- 
leged level. 

Call gates are accessed via a CALL instruction and are 
syntactically identical to calling a normal subroutine. 
When an interlevel Am386DX/DXL microprocessor call 
gate is activated, the following actions occur: 

1 . Load CS:EIP from gate check for validity; 

2. SS is pushed zero-extended to 32 bits; 

3. ESP is pushed; 

4. Copy word count 32-bit parameters from the old 
stack to the new stack; 

5. Push return address on stack. 

The procedure is identical for 80286 Call gates, except 
that 1 6-bit parameters are copied and 1 6-bit registers 
are pushed. 

Interrupt gates and Trap gates work in a similar fashion 
as the call gates, except there is no copying of parame- 
ters. The only difference between Trap and Interrupt 
gates is that control transfers through an Interrupt gate, 
disable further interrupts (i.e., the IF bit is set to 0), and 
Trap gates leave the interrupt status unchanged. 

Task Switching 

Avery important attribute of any multitasking/multi-user 
operating system is its ability to rapidly switch between 
tasks or processes. The Am386DX/DXL microproces- 
sor directly supports this operation by providing a task 
switch instruction in hardware. The Am386DX/DXL 
CPU task switch operation saves the entire state of the 
machine (all of the registers, address space, and a link 
to the previous task), loads a new execution state, per- 
forms protection checks, and commences execution in 
the new task, in about 1 7 ms. Like transfer of control via 
gates, the task switch operation is invoked by executing 
an intersegment JMP or CALL instruction that refers to a 
Task State Segment (TSS), or a task gate descriptor in 
the GDT or LDT. An INT n instruction, exception, trap, or 
external interrupt may also invoke the task switch opera- 
tion if there is a task gate descriptor in the associated 
IDT descriptor slot. 

The TSS descriptor points to a segment (see Figure 
29a) containing the entire Am386DX/DXL microproces- 
sor execution state while a task gate descriptor contains 
a TSS selector. The Am386DX/DXL CPU supports both 
80286 and Am386DX/DXL CPU style TSSs. Figure 30 
shows an 80286 TSS. The limit of an Am386DX/DXL 
microprocessor TSS must be greater than 0064H 
(002BH for an 80286 TSS) and can be as large as 4 Gb. 
In the additional TSS space, the operating system is 
free to store additional information, such as the reason 
the task is inactive, time the task has spent running, and 
open files belonging to the task. 
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Each task must have a TSS associated with it. The cur- 
rent TSS is identified by a special register in the 
Am386DX/DXL microprocessor called the Task State 
Segment Register (TR). This register contains a selec- 
tor referring to the task state segment descriptor that de- 
fines the current TSS. A hidden base and limit register 
associated with TR are loaded whenever TR is loaded 
with a new selector. Returning from a task is accom- 
plished by the IRET instruction. When IRET is executed, 
control is returned to the task that was interrupted. The 
current executing task's state is saved in the TSS and 
the old task state is restored from its TSS. 

Several bits in the flag register and machine status word 
(CR0) give information about the state of a task that are 
useful to the operating system. The Nested Task (NT) 
(bit 14 in EFLAGS) controls the function of the IRET in- 
struction. If NT = 0, the IRET instruction performs the 
regular return; when NT = 1, IRET performs a task 
switch operation back to the previous task. The NT bit is 
set or reset in the following fashion. 

When a CALL or INT instruction initiates a task switch, 
the new TSS will be marked busy and the back link 
field of the new TSS set to the old TSS selector. The NT 
bit of the new task is set by CALL or INT initiated task 
switches. An interrupt that does not cause a task switch 
will clear NT. (The NT bit will be restored after execution 
of the interrupt handler.) NT may also be set or cleared 
by POPF or IRET instructions. 

The Am386DX/DXL microprocessor Task State Seg- 
ment is marked busy by changing the descriptor type 
field from Type 9H to Type BH. An 80286 TSS is 
marked busy by changing the descriptor type field from 
Type 1 to Type 3. Use of a selector that references a 
busy task state segment causes an Exception 13. 

The Virtual Mode (VM) bit 1 7 is used to indicate if a task 
is a virtual 8086 task. If VM = 1 , then the tasks will use 
the Real Mode addressing mechanism. The virtual 8086 
environment is only entered and exited via a task switch 
(see Section Virtual Mode). 

The coprocessor's state is not automatically saved 
when a task switch occurs, because the incoming task 
may not use the coprocessor. The Task Switched (TS) 
Bit (bit 3 in the CR0) helps deal with the coprocessor's 
state in a multitasking environment. Whenever the 
Am386DX/DXL microprocessor switches tasks, it sets 
the TS bit. The Am386DX/DXL CPU detects the first use 
of a processor extension instruction after a task switch 
and causes the processor extension not available Ex- 
ception 7. The exception handler for Exception 7 may 
then decide whether to save the state of the coproces- 
sor. A processor extension not present Exception 7 will 
occur when attempting to execute an ESC or WAIT in- 
struction if the Task Switched and Monitor coprocessor 
extension bits are both set (i.e., TS = 1 and MP= 1). 
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Back Link Selector to TSS 



SP for CPL 



SS for CPL 



SP for CPL 1 



SS for CPL 1 
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Figure 30. 80286 TSS 



The T bit in the Am386DX/DXL microprocessor TSS in- 
dicates that the processor should generate a debug ex- 
ception when switching to a task. If T = 1 , then upon en- 
try to a new task, a debug Exception 1 will be generated. 

Initialization and Transition to Protected Mode 

Since the Am386DX/DXL microprocessor begins exe- 
cuting in Real Mode immediately after RESET, it is nec- 
essary to initialize the system tables and registers with 
the appropriate values. 

The GDT and IDT registers must refer to a valid GDT 
and IDT. The IDT should be at least 256-bytes long, 
and GDT must contain descriptors for the initial code 
and data segments. Figure 31 shows the tables and 
Figure 32 shows the descriptors needed for a simple 
Protected Mode Am386DX/DXL microprocessor sys- 
tem. It has a single code and single data/stack segment 
each 4 Gb long and a single privilege level PL= 0. 

The actual method of enabling Protected Mode is to load 
CR0 with PE bit set, via the MOV CR0, R/M instruction. 



This puts the Am386DX/DXL microprocessor in Pro- 
tected Mode. 

After enabling Protected Mode, the next instruction 
should execute an intersegment JMP to load the CS 
register and flush the instruction decode queue. The 
final step is to load all of the data segment registers with 
the initial selector values. 

An alternate approach to entering Protected Mode that 
is especially appropriate for multitasking operating sys- 
tems is to use the built in task-switch to load all of the 
registers. In this case, the GDT would contain two TSS 
descriptors in addition to the code and data descriptors 
needed for the first task. The first JMP instruction in Pro- 
tected Mode would jump to the TSS causing a task 
switch and loading all of the registers with the values 
stored in the TSS. The TR should be initialized to point to 
a valid TSS descriptor since a task switch saves the 
state of the current task in a task state segment. 

Paging 
Paging Concepts 

Paging is another type of memory management useful 
for virtual memory multitasking operating systems. Un- 
like segmentation that modularizes programs and data 
into variable length segments, paging divides pro- 
grams into multiple uniform size pages. Pages bear no 
direct relation to the logical structure of a program. 
While segment selectors can be considered the logical 
name of a program module or data structure, a page 
most likely corresponds to only a portion of a module or 
data structure. 

By taking advantage of the locality of reference dis- 
played by most programs, only a small number of pages 
from each active task need be in memory at any one 
moment. 

Paging Organization 

Page Mechanism 

The Am386DX/DXL microprocessor uses two levels of 
tables to translate the linear address (from the segmen- 
tation unit) into a physical address. There are three com- 
ponents to the paging mechanism of the Am386DX/DXL 
CPU: the page directory, the page tables, and the page 
itself (page frame). All memory-resident elements of the 
Am386DX/DXL CPU paging mechanism are the same 
size, namely, 4 Kb. A uniform size for all of the elements 
simplifies memory allocation and reallocation schemes, 
since there is no problem with memory fragmentation. 
Figure 33 shows how the paging mechanism works. 
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Figure 31. Simple Protected System 
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Page Descriptor Base Register 

CR2 is the Page Fault Linear Address register. It holds 
the 32-bit linear address that caused the last Page Fault 
detected. 

CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of the 
Page Directory. The lower 12 bits of CR3 are always 
zero to ensure that the Page Directory is always page 
aligned. Loading it via a MOV CR3, reg instruction 
causes the Page Table entry cache to be flushed, as will 



a task switch through a TSS that changes the value of 
CR0. (See Translation Look-Aside Buffer.) 

Page Directory 

The Page Directory is 4-Kb long and allows up to 1 024 
Page Directory entries. Each Page Directory entry con- 
tains the address of the next level of tables, the Page Ta- 
bles and information about the page table. The contents 
of a Page Directory entry are shown in Figure 34. The 
upper 10 bits of the linear address (A31-A22) are used 
as an index to select the correct Page Directory entry. 
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Page Tables 

Each Page Table is 4 Kb and holds up to 1 024 Page 
Table entries. Page Table entries contain the starting 
address of the page frame and statistical information 
about the page (see Figure 35). Address bits A21-A12 
are used as an index to select one of the 1024 Page 
Table entries. The 20 upper-bit page frame address is 
concatenated with the lower 1 2 bits of the linear address 
to form the physical address. Page tables can be shared 
between tasks and swapped to disks. 

Page Directory/Table Entries 

The lower 1 2 bits of the Page Table entries and Page Di- 
rectory entries contain statistical information about 
pages and page tables respectively. The P (Present) bit 
indicates if a Page Directory or Page Table entry can 
be used in address translation. If P = 1 , the entry can be 
used for address translation; if P = 0, the entry cannot be 
used for translation. Note that the present bit of the page 
table entry that points to the page where code is cur- 
rently being executed should always be set. Code that 
marks its own page not present should not be written. All 
of the other bits are available for use by the software . For 
example the remaining 31 bits could be used to indicate 
where on the disk the page is stored. 

The A (Accessed) bit 5 is set by the Am386DX/DXL mi- 
croprocessor for both types of entries before a read or 
write access occurs to an address covered by the entry. 
The D (Dirty) bit 6 is set to 1 before a write to an address 
covered by that page table entry occurs. The D bit is un- 
defined for Page Directory entries. When the P, A, and 
D bits are updated by the Am386DX/DXL CPU, the mi- 
croprocessor generates a Read-Modify- Write cycle that 
locks the bus and prevents conflicts with other proces- 
sors or peripherals. Software that modifies these bits 
should use the LOCK prefix to ensure the integrity of the 
page tables in multi-master systems. 

The three bits marked OS Reserved in Figures 34 and 
35 (bits 11-9) are software definable. OSs are free to 
use these bits for whatever purpose they wish. An 
example use of the OS Reserved bits would be to store 
information about page aging. By keeping track of how 
long a page has been in memory since being accessed, 
an operating system can implement a page replace- 
ment algorithm like Least Recently Used. 

The (User/Supervisor) U/S bit 2 and the (Read/Write) 
R/W bit 1 are used to provide protection attributes for 
individual pages. 

Page Level Protection (R/W, U/S Bits) 

The Am386DX/DXL microprocessor provides a set of 
protection attributes for paging systems. The paging 
mechanism distinguishes between two levels of pro- 
tection: user, which corresponds to level 3 of the 
segmentation based protection, and supervisor, which 
encompasses all of the other protection levels (0,1,2). 



Programs executing at level 0, 1 , or 2 bypass the page 
protection, although segmentation based protection is 
still enforced by the hardware. 

The U/S and R/W bits are used to provide User/Supervi- 
sor and Read/Write protection for individual pages or for 
all pages covered by a Page Table Directory entry. The 
U/S and R/W bits in the first level Page Directory Table 
apply to all pages described by the page table pointed to 
by that directory entry. The U/S and R/W bits in the sec- 
ond level Page Table entry apply only to the page de- 
scribed by that entry. The U/S and R/W bits for a given 
page are obtained by taking the most restrictive of the 
U/S and R/W bits from the Page Directory Table entries 
and the Page Table entries and using these bits to ad- 
dress the page. 

Example: If the U/S and R/W bits for the Page Directory 
entry were 1 and the U/S and R/W bits for the Page Ta- 
ble entry were 01 , the access rights for the page would 
be 01, the numerically smaller of the two. Table 12 
shows the effect of the U/S and R/W bits on accessing 
memory. 
Table 12. Protection Provided by R/W and U/S 



U/S 


R/W 


Permitted 
Level 3 


Permitted Access 
Levels 0, 1 , or 2 





1 
1 




1 



1 


None 

None 
Read-Only 
Read/Write 


Read/Write 
Read/Write 
Read/Write 
Read/Write 



However, a given segment can be easily made read- 
only for level 0, 1 , or 2 via the use of segmented protec- 
tion mechanisms (see Section Protection). 

Translation Look-Aside Buffer 

The Am386DX/DXL microprocessor paging hardware 
is designed to support demand paged virtual memory 
systems. However, performance would degrade sub- 
stantially if the processor was required to access two 
levels of tables for every memory reference. To solve 
this problem, the Am386DX/DXL device keeps a cache 
of the most recently accessed pages, this cache is 
called the Translation Look- Aside Buffer (TLB). The 
TLB is a four-way set associative 32-entry page table 
cache. It automatically keeps the most commonly used 
Page Table entries in the processor. The 32-entry TLB, 
coupled with a 4K page size, results in coverage of 
1 28 Kb of memory addresses. For many common multi- 
tasking systems, the TLB will have a hit rate of about 
98%. This means that the processor will only have to 
access the two-level page structure on 2% of all memory 
references. Figure 36 illustrates how the TLB com- 
plements the Am386DX/DXL microprocessor's paging 
mechanism. 
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Figure 36. Translation Look-Aside Buffer 

Paging Operation 

The paging hardware operates in the following fashion: 
the paging unit hardware receives a 32-bit linear ad- 
dress from the segmentation unit. The upper 20 linear 
address bits are compared with all 32 entries in the TLB 
to determine if there is a match. If there is a match (i.e., a 
TLB hit), then the 32-bit physical address is calculated 
and will be placed on the address bus. 

However, if the Page Table entry is not in the TLB, the 
Am386DX/DXL microprocessor will read the appro- 
priate Page Directory entry. If P = 1 on the Page Direc- 
tory entry indicating that the page table is in memory, 
then the Am386DX/DXL device will read the appro- 
priate Page Table entry and set the Access bit. If P = 1 
on the Page Table entry indicating that the page is in 
memory, the Am386DX/DXL device will update the 
Access and Dirty bits as needed and fetch the operand. 
The upper 20 bits of the linear address, read from the 
page table, will be stored in the TLB forfuture accesses. 
However, if P = for either the Page Directory entry or 
the Page Table Entry, then the processor will generate 
a Page Fault, an Exception 14. 

The processor will also generate an Exception 14, Page 
Fault, if the memory reference violated the page protec- 
tion attributes (i.e., U/S or R/W; trying to write to a read- 
only page). CR2 will hold the linear address that caused 
the page fault. If a second page fault occurs while the 
processor is attempting to enter the service routine for 
the first, then the processor will invoke the Page Fault 
(Exception 1 4) handler a second time, rather than the 
Double Fault (Exception 8) handler. Since Exception 14 



is classified as a fault, CS:EIP will point to the instruction 
causing the page fault. The 1 6-bit error code pushed as 
part of the page fault handler will contain status bits 
which indicate the cause of the Page Fault. 

The 1 6-bit error code is used by the operating system to 
determine how to handle the Page Fault. Figure 37 
shows the format of the page-fault error code and the in- 
terpretation of the bits. 

Note: Even though the bits in the error code (U/S, R/W, 
and P) have similar names as the bits in the Page Direc- 
tory/Table entries, the interpretation of the error code 
bits is different. Figure 38 indicates what type of access 
caused the Page Fault. 



15 
























3 


2 


1 































U 


w 




U 


U 


U 


U 


U 


U 


U 


U 


U 


u 


u 


u 


U 


S 


R 


P 



15021B-040 

Figure 37. Page Fault Error Code Format 

U/S: The U/S bit indicates whether the access causing 
the fault occurred when the processor was executing 
the User Mode (U/S = 1) or in Supervisor mode 
(U/S = 0). 

R/W: The R/W bit indicates whether the access causing 
the fault was a Read (R/W = 0) or a Write (R/W= 1). 

P: The P bit indicates whether a Page Fault was caused 
by a not-present page (P = 0) or by a page level protec- 
tion violation (P = 1). 

U: Undefined. 



U/S 


R/W 


Access Type 





1 

1 




1 



1 


Supervisor* Read 
Supervisor Write 
User Read 
User Write 



*Descriptor table access will fault with U/S = 0, even if the 
program is executing at level 3. 

15021 B-041 

Figure 38. Type of Access Causing Page Fault 

Operating System Responsibilities 

The Am386DX/DXL microprocessor takes care of the 
page address translation process, relieving the burden 
from an operating system in a demand-paged system. 
The operating system is responsible for setting up the 
initial page tables and handling any page faults. The op- 
erating system is also required to invalidate (i.e., flush) 
the TLB when any changes are made to any of the Page 
Table entries. The operating system must reload CR3 to 
cause the TLB to be flushed. 
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Setting up the tables is simply a matter of loading CR3 
with the address of the Page Directory and allocating 
space for the Page Directory and the Page Tables. The 
primary responsibility of the operating system is to im- 
plement a swapping policy and handle all of the page 
faults. 

A final concern of the operating system is to ensure that 
the TLB cache matches the information in the paging ta- 
bles. In particular, any time the operating system sets 
the P present bit of page table entry to zero, the TLB 
must be flushed. Operating systems may want to take 
advantage of the fact that CR3 is stored as part of a TSS 
to give every task or group of tasks its own set of page 
tables. 

Virtual 8086 Environment 
Executing 8086 Programs 

The Am386DX/DXL microprocessor allows the execu- 
tion of 8086 application programs in both Real Mode 
and in the Virtual 8086 Mode (Virtual Mode). Of the two 
methods, Virtual 8086 Mode offers the system designer 
the most flexibility. The Virtual 8086 Mode allows the 
execution of 8086 applications, while still allowing 
the system designer to take full advantage of the 
Am386DX/DXL device protection mechanism. In par- 
ticular, the Am386DX/DXL CPU allows the simultane- 
ous execution of 8086 operating systems and its appli- 
cations, and an Am386DX/DXL CPU operating system 
and both 80286 and Am386DX/DXL microprocessor 
applications. Thus, in a multiuser Am386DX/DXL CPU 
computer, one person could be running a MS-DOS 
spreadsheet, another person using MS-DOS, and a 
third person could be running multiple UNIX utilities and 
applications. Each person in this scenario would believe 
they had the computer completely to themself . Figure 39 
illustrates this concept. 

Virtual 8086 Mode Addressing Mechanism 

One of the major differences between Am386DX/DXL 
microprocessor Real and Protected Modes is how the 
segment selectors are interpreted. When the processor 
is executing in Virtual 8086 Mode, the segment registers 
are used in an identical fashion to Real Mode. The 
contents of the segment register are shifted left 4 bits 
and added to the offset to form the segment base linear 
address. 

The Am386DX/DXL microprocessor allows the operat- 
ing system to specify which programs use the 8086 style 
address mechanism, and which programs use Pro- 
tected Mode addressing, on a per task basis. Through 
the use of paging, the "I -Mb address space of the Virtual 
Mode task can be mapped to anywhere in the 4-Gb lin- 
ear address space of the Am386DX/DXL device. Like 
Real Mode, Virtual Mode effective addresses (i.e., seg- 
ment offsets) that exceed 64 Kb will cause an Exception 
13. However, these restrictions should not prove to be 



important because most tasks running in Virtual 8086 
Mode will simply be existing 8086 application programs. 

Paging In Virtual Mode 

The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks and provides protection 
and operating system isolation. Although it is not 
strictly necessary to have the paging hardware enabled 
to run Virtual Mode tasks, it is needed in order to run 
multiple Virtual Mode tasks or to relocate the address 
space of a Virtual Mode task to physical address space 
greater than 1 Mb. 

The paging hardware allows the 20-bit linear address 
produced by a Virtual Mode program to be divided into 
up to 256 pages. Each one of the pages can be located 
anywhere within the maximum 4-Gb physical address 
space of the Am386DX/DXL microprocessor. In addi- 
tion, since CR3 (the Page Directory Base Register) is 
loaded by a task switch, each Virtual Mode task can use 
a different mapping scheme to map pages to different 
physical locations. Finally, the paging hardware allows 
the sharing of the 8086 operating system code between 
multiple 8086 applications. Figure 39 shows how the 
Am386DX/DXL device paging hardware enables multi- 
ple 8086 programs to run under a virtual memory de- 
mand paged system. 

Protection and I/O Permission Bitmap 

All Virtual 8086 Mode programs execute at privilege 
level 3, the level of least privilege. As such, Virtual 8086 
Mode programs are subject to all of the protection 
checks defined in Protected Mode. (This is different 
from Real Mode which implicitly is executing at privilege 
level 0, the level of greatest privilege.) Thus, an attempt 
to execute a privileged instruction when in Virtual 8086 
Mode will cause an Exception 13 fault. 

The following are privileged instructions, which may be 
executed only at Privilege Level 0. Therefore, attempt- 
ing to execute these instructions in Virtual 8086 Mode 
(or anytime CPL > 0) causes an Exception 13 fault. 



MOV DRn,reg; MOV reg,DRn; 
MOV TRn,reg; MOV reg,TRn; 
MOV CRn,reg; MOV reg, CRn; 



LIDT; 
LGDT; 
LMSW; 
CLTS ; 
HLT; 

Several instructions, particularly those applying to the 
multitasking model and protection model, are available 
only in Protected Mode. Therefore, attempting to exe- 
cute the following instructions in Real Mode or in Virtual 
8086 Mode generates an Exception 6 fault. 



LTR; 


STR; 


LLDT; 


SLDT 


LAR; 


VERR 


LSL; 
ARPL. 


VERW 
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Figure 39. Virtual 8086 Environment Memory Management 



The instructions that are lOPL-sensitive in Protected 
Mode are: 



IN; 


STI; 


OUT; 


CLI; 


INS; 




OUTS ; 




REP INS; 




REP OUTS. 





In Virtual 8086 Mode, a slightly different set of instruc- 
tions are made lOPL-sensitive. The following instruc- 
tions are IO PL-sensitive in Virtual 8086 Mode: 



INT n; 


STI; 


PUSHF; 


CLI; 


POPF ; 


I RET 



The PUSHF, POPF, and IRET instructions are IOPI- 
sensitive in Virtual 8086 Mode only. This provision al- 
lows the IF flag (interrupt enable flag) to be virtualized to 
the Virtual 8086 Mode program. The INT n software 



interrupt instruction is also lOPL-sensitive in Virtual 
8086 Mode. Note, however, that the INT 3 (op-code 
0CCH), INTO, and BOUND instructions are not IOPL- 
sensitive in Virtual 8086 Mode (they are not IOPL sensi- 
tive in Protected Mode either). 

Note that the I/O instructions (IN, OUT, INS, OUTS, 
REP INS, and REP OUTS) are not lOPL-sensitive in Vir- 
tual 8086 Mode. Rather, the I/O instructions become 
automatically sensitive to the I/O Permission Bitmap 
contained in the Am386DX/DXL CPU TSS. The I/O Per- 
mission Bitmap, automatically used by the Am386DX/ 
DXL microprocessor in Virtual 8086 Mode, is illustrated 
by Figures 29a and 29b. 

The I/O Permission Bitmap can be viewed as a 
0-64K bit string, that begins in memory at offset 
Bit_Map_Offset in the current TSS. Bit_Map_Offset 
must be < DFFFH so the entire bit map and the byte FFH 
that follows the bit map are all at offset < FFFFH from the 
TSS base. The 1 6-bit pointer Bit_Map__Offset (15-0) is 
found in the word beginning at offset 66H (1 02 decimal) 
from the TSS base, as shown in Figure 29a. 
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Each bit in the I/O Permission Bitmap corresponds to a 
single byte-side I/O port, as illustrated in Figure 29a. If a 
bit is 0, I/O to the corresponding byte-wide port can oc- 
cur without generating an exception. Otherwise the I/O 
instruction causes an Exception 13 fault. Since every 
byte-wide I/O port must be protectable, all bits corre- 
sponding to a Word-wide or Dword-wide port must be 
for the Word-wide or Dword-wide I/O to be permitted. If 
all the referenced bits are 0, the I/O will be allowed. If 
any referenced bits are 1 , the attempted I/O will cause 
an Exception 13 fault. 

Due to the use of a pointer to the base of the I/O Permis- 
sion Bitmap, the bitmap may be located anywhere within 
the TSS or may be ignored completely by pointing the 
Bit_Map_Offset (15-0) beyond the limit of the TSS 
segment. In the same manner, only a small portion of 
the 64K I/O space need have an associated map bit by 
adjusting the TSS limit to truncate the bitmap. This 
eliminates the commitment of 8K of memory when a 
complete bitmap is not required, while allowing the fully 
general case if desired. 

Example of Bitmap for I/O Ports 0-255 : Setting the TSS 
limit to {Bit_Map_Offset + 31 +1**} [**see note below] 
will allow a 32-byte bitmap forthe I/O ports 0-255, plus a 
terminator byte of all 1s [**see note below]. This allows 
the I/O bitmap to control I/O Permission to I/O ports 
0-255 while causing an Exception 1 3 fault on attempted 
I/O to any I/O port 256 through 65,565. 

**lmportant Implementation Note: Beyond the last byte of 
I/O mapping, information in the I/O Permission Bitmap must 
be a byte containing all 1 s. The byte of all 1 s must be within the 
limit of the Am386DX/DXL CPU TSS segment (see Figure 
29a). 

Interrupt Handling 

In order to fully support the emulation of an 8086 ma- 
chine, interrupts in Virtual 8086 Mode are handled in a 
unique fashion. When running in Virtual Mode, all inter- 
rupts and exceptions involve a privilege change back 
to the host Am386DX/DXL CPU operating system. The 
Am386DX/DXL microprocessor operating system de- 
termines if the interrupt comes from a Protected Mode 
application or from a Virtual Mode program by examin- 
ing the VM bit in the EFLAGS image stored on the stack. 

When a Virtual Mode program is interrupted and execu- 
tion passes to the interrupt routine at level 0, the VM bit 
is cleared. However, the VM bit is still set in the EFLAGS 
image on the stack. 

The Am386DX/DXL microprocessor operating system 
in turn handles the exception or interrupt and then re- 
turns control to the 8086 program. The Am386DX/DXL 
CPU operating system may choose to let the 8086 oper- 
ating system handle the interrupt or it may emulate the 
function of the interrupt handler. For example, many 
8086 operating system calls are accessed by PUSHing 
parameters on the stack, and then executing an INT n 
instruction. If the IOPL is set to then all INT n in- 
structions will be intercepted by the Am386DX/DXL 



microprocessor operating system. The Am386DX/DXL 
CPU operating system could emulate the 8086 operat- 
ing system's call. Figure 40 shows how the Am386DX/ 
DXL microprocessor operating system could intercept 
an 8086 operating system's call to Open a File. 

The Am386DX/DXL microprocessor operating system 
can provide a Virtual 8086 Environment that is totally 
transparent to the application software via intercepting 
and then emulating 8086 operating system's calls, and 
intercepting IN and OUT instructions. 

Entering and Leaving Virtual 8086 Mode 

Virtual 8086 Mode is entered by executing an I RET in- 
struction (at CPL = 0), or Task Switch (at any CPL) to an 
Am386DX/DXL microprocessor task whose Am386DX/ 
DXL microprocessor TSS has an EFLAGS image con- 
taining a 1 in the VM bit position while the processor is 
executing in Protected Mode. That is, one way to enter 
Virtual 8086 Mode is to switch to a task with an 
Am386DX/DXL device TSS that has a 1 in the VM bit in 
the EFLAGS image. The other way is to execute a 32-bit 
I RET instruction at privilege level 0, where the stack has 
a 1 in the VM bit in the EFLAGS image. POPF does not 
affect the VM bit even if the processor is in Protected 
Mode or level 0, and so cannot be used to enter Virtual 
8086 Mode. PUSHF always pushes a in the VM bit, 
even if the processor is in Virtual 8086 Mode, so that a 
program cannot tell if it is executing in Real Mode or in 
Virtual 8086 Mode. 

The VM bit can be set by executing an IRET instruction 
only at privilege level or by any instruction or interrupt 
that causes a task switch in Protected Mode (with VM = 
1 in the new FLAGS image), and can be cleared only by 
an interrupt or exception in Virtual 8086 Mode. I RET and 
POPF instructions executed in Real Mode or Virtual 
8086 Mode will not change the value in the VM bit. 

The transition out of Virtual 8086 Mode to Am386DX/ 
DXL microprocessor Protected Mode occurs only on re- 
ceipt of an interrupt or exception (such as due to a sensi- 
tive instruction). In Virtual 8086 Mode, all interrupts and 
exceptions vector through the Protected Mode IDT, 
and enter an interrupt handler in Am386DX/DXL CPU 
Protected Mode. That is, as part of interrupt processing, 
the VM bit is cleared. 

Because the matching IRET must occur from level 0, if 
an Interrupt or Trap gate is used to field an interrupt or 
exception out of Virtual 8086 Mode, the gate must per- 
form an interlevel interrupt only to level 0. Interrupt or 
Trap gates through conforming segments or through 
segments with DPL > 0, will raise a GP fault with the CS 
selector as the error code. 

Task Switches To/From Virtual 8086 Mode 

Tasks which can execute in Virtual 8086 Mode must be 
described by a TSS with the new Am386DX/DXL micro- 
processor format (Type 9 or 1 1 descriptor). 
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8086 Application makes "Open File Call" -> causes General Protection Fault (Arrow #1 ) 
Virtual 8086 Monitor intercepts call. Calls Am386DX/DXL CPU OS (Arrow #2) 
Am386DX/DXL CPU OS "Opens File" returns control to 8086 OS (Arrow #3) 
8086 OS returns control to application (Arrow #4) 
Transparent to Application 
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Figure 40. Virtual 8086 Environment Interrupt and Call Handling 



A task switch out of Virtual 8086 Mode will operate 
exactly the same as any other task switch out of a task 
with an Am386DX/DXL CPU TSS. All of the program- 
mer visible state, including the FLAGS register with the 
VM bit set to 1 , is stored in the TSS. The segment regis- 
ters in the TSS will contain 8086 segment base values 
rather than selectors. 

A task switch into a task described by an Am386DX/DXL 
microprocessor TSS will have an additional check to 
determine if the incoming task should be resumed in 
Virtual 8086 Mode. Tasks described by 80286 format 
TSSs cannot be resumed in Virtual 8086 Mode, so no 
check is required there (the FLAGS image in 80286 
format TSS has only the low-order 16 FLAGS bits). Be- 
fore loading the segment register images from an 
Am386DX/DXL CPU TSS, the FLAGS image is loaded 
so that the segment registers are loaded from the TSS 
image as 8086 segment base values. The task is now 
ready to resume in Virtual 8086 Execution Mode. 



Transitions Through Trap and interrupt Gates, 
andlRET 

A task switch is one way to enter or exit Virtual 8086 
Mode. The other method is to exist through a Trap or In- 
terrupt gate, as part of handling an interrupt, and to enter 
as part of executing an I RET instruction. The transition 
out must use an Am386DX/DXL microprocessor Trap 
gate (Type 14) or Interrupt gate (Type 15) that must 
point to a non-conforming level segment (DPL = 0) in 
order to permit the trap handler to IRET back to the 
Virtual 8086 program. The gate must point to a non- 
conforming level segment to perform a level switch to 
level so that the matching IRET can change the VM 
bit. Am386DX/DXL device gates must be used, since 
80286 gates save only the lower 16 bits of the FLAGS 
register, so that the VM bit will not be saved on transi- 
tions through the 80286 gates. Also, the 16-bit IRET 
(presumably) used to terminate the 80286 interrupt han- 
dler will pop only the lower 16 bits from FLAGS, and will 
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not affect the VM bit. The action taken for an Am386DX/ 
DXL microprocessor Trap or Interrupt gate if an interrupt 
occurs while the task is executing in Virtual 8086 Mode 
is given by the following sequence. 

1 . Save the FLAGS register in a temp to push later. 
Turn off the VM and TF bits, and if the interrupt is 
serviced by an Interrupt gate, turn off IF bit, also. 

2. Interrupt and Trap gates must perform a level switch 
from 3 (where the VM86 program executes) to level 
(so I RET can return). This process involves a stack 
switch to the stack given in the TSS for privilege 
level 0. Save the Virtual 8086 Mode SS and ESP 
registers to push in a later step. The segment 
register load of SS will be done as a Protected Mode 
segment load since the VM bit was turned off above. 

3. Push the 8086 segment register values onto the new 
stack, in the order: GS, FS, DS, ES. These are 
pushed as 32-bit quantities with undefined values in 
the upper 16 bits. Then load these 4 registers with 
null selectors (0). 

4. Push the old 8086 stack pointer onto the new stack 
by pushing the SS register (as 32-bit, high bits 
undefined), then pushing the 32-bit ESP register 
saved above. 

5. Push the 32-bit FLAGS register saved in step 1 . 

6. Push the old 8086 instruction pointer onto the new 
stack by pushing the CS register (as 32-bits, high bits 
undefined), then pushing the 32-bit EIP register. 

7. Load up the new CS:EIP value from the interrupt 
gate and begin execution of the interrupt routine in 
Protected Am386DX/DXL Microprocessor Mode. 

The transition out of Virtual 8086 Mode performs a level 
change and stack switch, in addition to changing back to 
Protected Mode. In addition, all of the 8086 segment 
register images are stored on the stack (behind the 
SS:ESP image), and then loaded with null (0) selectors 
before entering the interrupt handler. This will permit the 
handler to safely save and restore the DS, ES, FS, and 
GS registers as 80286 selectors. This is needed so that 
interrupt handlers that "don't care" about the mode of the 
interrupted program can use the same prolog and epilog 
code for state saving (i.e., push all registers in prolog, 
pop all in epilog) regardless of whether or not a native 
mode or Virtual 8086 Mode program was interrupted. 
Restoring null selectors to these registers before exe- 
cuting the I RET will not cause a trap in the interrupt han- 
dler. Interrupt routines that expect values in the segment 
registers or return values in segment registers will have 
to obtain/return values from the 8086 register images 
pushed onto the new stack. They will need to know the 
mode of the interrupted program in order to know 
where to find/return segment registers, and also to 
know how to interpret segment register values. 



The I RET instruction will perform the inverse of the 
above sequence. Only the extended Am386DX/DXL 
microprocessor I RET instruction (operand size = 32) 
can be used and must be executed at level to change 
the VM bit to 1 . 

1 . If the NT bit in the FLAGS register is on, an inter-task 
return is performed. The current state is stored in the 
current TSS, and the link field in the current TSS is 
used to locate the TSS for the interrupted task which 
is to be resumed. 

Otherwise, continue with the following sequence. 

2. Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value active 
in the interrupted routine. 

3. Pop off the instruction pointer CS:EIP. EIP is popped 
first, then a 32-bit word is popped that contains the 
CS value in the lower 16 bits. If VM = 0, this CS 
load is done as a Protected Mode segment load. If 
VM = 1 , this will be done as an 8086 segment load. 

4. Increment the ESP register by 4 to bypass the 
FLAGS image which was popped in step 1 . 

5. If VM = 1, load segment registers ES, DS, FS, 
and GS from memory locations SS:[ESP + 8], 
SS:[ESP + 12], SS:[ESP + 16], and SS:[ESP + 20], 
respectively, where the new value of ESP stored in 
step 4 is used. Since VM = 1 , these are done as 8086 
segment register loads. 

Else if VM = 0, check that the selectors in ES, DS, 
FS, and GS are valid in the interrupted routine. Null 
out invalid selectors to trap if an attempt is made to 
access through them. 

6. If (RPL(CS) > CPL), pop the stack pointer SS:ESP 
from the stack. The ESP register is popped first, 
followed by 32-bits containing SS in the lower 1 6 bits. 
If VM = 0, SS is loaded as a Protected Mode segment 
register load. If VM = 1 , an 8086 segment register 
load is used. 

7. Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine's stack image in step 1) determines 
whether the processor resumes the interrupted 
routine in Protected Mode of Virtual 8086 Mode. 



Am386DX/DXL Microprocessor Data Sheet 



67 



M AMD 

FUNCTIONAL DATA 
Introduction 

The Am386DX/DXL microprocessor features a straight 
forward functional interface to the external hardware. 
The Am386DX/DXL CPU has separate parallel buses 
for data and address. The data bus is 32 bits in width and 
is bidirectional. The address bus outputs 32-bit address 
values in the most directly usable form for the high- 
speed local bus: 4 individual Byte Enable signals and 
the 30 upper-order bits as a binary value. The data and 
address buses are interpreted and controlled with their 
associated control signals. 

A dynamic data bus sizing feature allows the processor 
to handle a mix of 32- and 1 6-bit external buses on a 
cycle-by-cycle basis (see Data Bus Sizing). If 1 6-bit bus 
size is selected, the Am386DX/DXL microprocessor 
automatically makes any adjustment needed, even 
performing another 16-bit bus cycle to complete the 
transfer if that is necessary. Any 8-bit peripheral devices 
may be connected to 32- or 1 6-bit buses with no loss of 
performance. A new address pipelining option is pro- 
vided and applies to 32- and 1 6-bit buses for substan- 
tially improved memory utilization, especially for the 
most heavily used memory resources. 

The address pipelining option, when selected, typically 
allows a given memory interface to operate with one 
less wait state than would otherwise be required (see 
Address Pipelining). The pipelined bus is also well 
suited to interleaved memory designs. When address 
pipelining is requested by the external hardware, the 
Am386DX/DXL microprocessor will output the address 
and bus cycle definition of the next bus cycle (if it is inter- 
nally available) even while waiting for the current cycle 
to be acknowledged. 

Non-pipelined address timing, however, is ideal for 
external cache designs, since the cache memory will 
typically be fast enough to allow non-pipelined cycles. 
For maximum design flexibility, the address pipelining 
option is selectable on a cycle-by-cycle basis. 

The processor's bus cycle is the basic mechanism for 
information transfer, either from system to processor or 
from processorto system. Am386DX/DXL microproces- 
sor bus cycles perform data transfer in a minimum of 
only two clock periods. On a 32-bit data bus, the 
maximum Am386DX/DXL device transfer at 20-MHz 
bandwidth is therefore 40 Mb/s, at 25-MHz bandwidth is 
50 Mb/s, at 33-MHz bandwidth is 66 Mb/s, and at 
40-MHz bandwidth is 80 Mb/s. Any bus cycle will be 
extended for more than two clock periods, however, if 
external hardware withholds acknowledgment of the 
cycle. At the appropriate time, acknowledgment is 
signaled by asserting the Am386DX/DXL microproces- 
sor READY input. 

The Am386DX/DXL CPU can relinquish control of its 
local buses to allow mastership by other devices, such 



as direct memory access channels. When relinquished, 
HLDA is the only output pin driven by the Am386DX/ 
DXL microprocessor providing near-complete isolation 
of the processor from its system. The near-complete 
isolation characteristic is ideal when driving the system 
from test equipment and in fault-tolerant applications. 

Functional data covered in this section describes the 
processor's hardware interface. First, the set of signals 
available at the processor pins is described (see Signal 
Description). Following that are the signal waveforms 
occurring during bus cycles (see Bus Transfer Mecha- 
nism, Bus Functional Description, and Other Functional 
Descriptions). 

Signal Description 
Introduction 

Ahead is a brief description of the Am386DX/DXL CPU 
input and output signals arranged by functional groups 
(see Figure 41). 

Example signal: 

M/lO —High voltage indicates Memory selected 
—Low voltage indicates I/O selected 

The signal descriptions sometimes refer to AC timing 
parameters, such as t25 RESET Setup Time and t26 
RESET Hold Time. 

Clock (CLK2) 

CLK2 provides the fundamental timing for the 
Am386DX/DXL microprocessor. It is divided by two in- 
ternally to generate the internal processor clock used for 
instruction execution. The internal clock is comprised of 
two phases, phase one and phase two. Each CLK2 pe- 
riod is a phase of the internal clock. Figure 42 illustrates 
the relationship. If desired, the phase of the internal 
processor clock can be synchronized to a known phase 
by ensuring the RESET signal falling edge meets its ap- 
plicable setup and hold times, t25 and t26. 

Data Bus (D31-D0) 

These three-state, bidirectional signals provide the gen- 
eral purpose data path between the Am386DX/DXL mi- 
croprocessor and other devices. Data bus inputs and 
outputs indicate 1 when High. The data bus can transfer 
data on 32- and 16-bit buses using a data bus sizing 
feature controlled by the BS16 input. See Section Bus 
Control. Data bus reads require that read data setup and 
hold times, t21 and t22, be met for correct operation. In 
addition, the Am386DX/DXL microprocessor requires 
that all data bus pins be at a valid logic sta te (High or 
Low) at the end of each read cycle, when READY is 
asserted. During any write operation (and during halt 
cycles and shut down cycles), the Am386DX/DXL 
microprocessor always drives all 32 signals of the data 
bus even if the current bus size is 16 bits. 
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Address Bus (BE3-BE0, A31-A2) 

These three-state outputs provide physical memory 
addresses or I/O port addresses. The address bus is 
capable of addressing 4 Gb of physical memory space 
(OOOOOOOOH-FFFFFFFFH), and 64 Kb of I/O address 
space (00000000H-0000FFFFH) for programmed I/O. 
I/O transfers automatically generated for Am386DX/ 
DXL microprocessor-to-coprocessor communication 
use I/O addresses 800000F8H-800000FFH, so A31 is 
High in conjunction with M/lO Low allows simple gen- 
eration of the coprocessor select signal. 

The Byte Enable outputs, BE3-BE0, directly indicate 
which bytes of the 32-bit data bus are involved with the 
current transfer. This is most convenient for external 
hardware. 

BEO applies to D7-D0 
BET applies to D15-D8 
BE2 applies to D23-D16 
BE3 applies to D31-D24 

The number of Byte Enables asserted indicates the 
physical size of the operand being transferred (1 , 2, 3, or 
4 bytes). Refer to Section Operand Alignment. 

When a memory write cycle or I/O write cycle is in pro- 
gress and the operand being transferred occupies only 
the upper 16 bits of the data bus (D31-D16), duplicate 
data is simultaneously presented on the corresponding 
lower 1 6 bits of the data bus (D15-D0). This duplication 



is performed for optimum write performance on 16 bit 
buses. The pattern of write data duplication is a function 
of the Byte Enables asserted during the write cycle. 
Table 13 lists the write data present on D31-D0, as a 
function of the asserted Byte Enable outputs BE3-BE0. 

Bus C ycle Definition Signals (W/R, D/c, M/lo, 

LOCK) 

These three-state outputs define the type of bus cycle 
being performed. W/R distinguishes between write 
andjread cycles, D/C between data and control cycles, 
M/lO between memory and I/O cycles, and LOCK 
between locked and unlocked bus cycles. 

The primary bus cycle definition signals are W/R, D/C, 
and M /IO, since these are the signals driven valid as the 
ADS (Address Status output) is driven asserted. The 
LOCK is driven valid at the same time as the first locked 
bus cycle begins, which due to address pipelining, could 
be later than ADS is driven asserted. See Pipelined Ad- 
dress. The LOCK is negated when the READY input 
terminates the last bus cycle that was locked. 

Exact bus cycle definitions, as a function of W/R, D/C, 
and M/To, are given in Table14. Note one combination 
of W/R, D/C, and M/lO is never given when ADS is as- 
serted (however, that combination, which is listed as 
does not occur, may occur during idle bus states when 
ADS is not asserted). If M/lO, D/C, and W/R are quali- 
fied by ADS asserted, then a decoding scheme may be 
simplified by using this definition. 



Table 13. Write Data Duplication as a Function of BE3-BE0 






Am386DX/DXL CPU Byte Enables 


Am386DX/DXL CPU Write Data 


Automatic 
Duplication? 


BE3 BE2 BET BEO 


D31-D24 D23-D16 D15-D8 


D7-D0 


High High High Low 


Undef Undef Undef 


A 


No 


High High Low High 


Undef Undef B 


Undef 


No 


High Low High High 


Undef C Undef 


C 


Yes 


Low High High High 


D Undef D 


Undef 


Yes 


High High Low Low 


Undef Undef B 


A 


No 


High Low Low High 


Undef C B 


Undef 


No 


Low Low High High 


D C D 


C 


Yes 


High Low Low Low 


Undef C B 


A 


No 


Low Low Low High 


D C B 


Undef 


No 


Low Low Low Low 


D C B 


A 


. No 



Key: 



D = Logical Write Data D31-D24 
C = Logical Write Data D23-D1 6 



B = Logical Write Data D15-D8 
A = Logical Write Data D7-D0 
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Table 14. Bus Cycle Definition 



M/IO 


D/C 


W/R 


Bus Cycle Type 


Locked? 


Low 


Low 


Low 


Interrupt Acknowledge 


Yes 


Low 


Low 


High 


Does Not Occur 


— 


Low 


High 


Low 


I/O Data Read 


No 


Low 


High 


High 


I/O Data Write 


No 


High 


Low 


Low 


Memory Code Read 


No 


High 


Low 


High 


Halt: Shutdown: 
Address = 2 Address = 

BEO High BEO Low 
BE1 High BE1 High 
BE2 Low BE2 High 
BE3 High BE3 High 
A31-A2 Low A31-A2 Low 


No 


High 


High 


Low 


Memory Data Read 


Some Cycles 


High 


High 


High 


Memory Data Write 


Some Cycles 



Bus Control Signals (ads, ready, na, bsiI) 

Introduction 

The following signals allow the processor to Indicate 
when bus cycle has begun and allow other system hard- 
ware to control address pipelining, data bus width, and 
bus cycle termination. 

Address Status ( ads) 

This three-state output indicates that a valid bus cycle 
definition and address (W/R, D/C, M/Io, BE3-BE0, and 
A31-A2) is being driven at the Am386DX/DXL micro- 
processor pins. It is asserted during T1 and T2P bus 
states (see Non-pipelined Address and Pipelined 
Address for additional information on bus states). 



Transfer Acknowledge (ready) 

This input indicates the current bus cycle is complete, 



and the active bytes indicated by BE3-BE0 and BS16 
are accepted or provided. When READY is sampled 
asserted during a read cycle or interrupt acknowledge 
cycle, the Am386DX/DXL microprocessor latches the 
input data and terminates the cycle. When READY is 
sampled asserted during a write cycle, the processor 
terminates the bus cycle. 



READY is ignored on the first bus state of all bus cycles, 
and sampled each bus state thereafter until asserted. 
READY must eventually be asserted to acknowledge 
every bus cycle, including Halt Indication and S hutdown 
Indication bus cycles. When being sampled, READY 
must always meet setup and hold times, t1 9 and t20, for 
correct operation. See all sections of Bus Functional 
Description. 

Next Address Request ( NA) 

This is used to request address pipelining. This input 
indicates the system is prepared to_accept new values 
of BE3-BE0, A31-A2, W/R, D/C, and M/IO from 
the Am386DX/DXL microprocessor even if the end of 



the current cycle is not being acknowledged on READY. 
If this input is asserted when sampled, the next address 
is driven onto the bus provided the next bus request is 
already pending internally. See Address Pipelining and 
Read and Write Cycles. NA must always meet setup 
and hold times, t15 and t16, for correct operation. 



Bus Size 16 (BS16) 



The BS16 feature allows the Am386DX/DXL micropro- 
cessor to directly connect to 32- and 1 6-bit data buses. 
Asserting this input constrains the current bus cycle to 
use only the lower-order half (D1 5-DO) of the data bus, 
corresponding to BEO and BIT. As sertin g BS16 has no 
additional effect if only BEO and/or BIT are asserted in 
the current cycle. However, during bus cycles asserting 
BE2orBE3, asserting BS1 6 will automatically cause the 
Am386DX/DXL microprocessor to make adjustments 
for correct transfer of the upper byte(s) using only physi- 
cal data signals D15-D0. 

If the operand spans both halves of the data bus and 
BS16 is asserted, the Am386DX/DXL microprocessor 
will automatically perform another 16-bit bus cycle. 
BS16 must always meet setup and hold times, t1 7 and 
t18, for correct operation. 

Am386DX/DXL CPU I/O cycles are automatically gen- 
erated for coprocessor communication. Since the 
Am386DX/DXL microprocessor must transfer 32-bit 
quantities between itself and a 387DX math coproces- 
sor, BS16 must not be asserted during 387DX math 
coprocessor communication cycles. 

Bus Arbitration Signals (HOLD, HLDA) 

Introduction 

This section describes the mechanism by which the 
processor relinquishes control of its local buses when 
requested by another bus master device. See 
Entering and Exiting Hold Acknowledge for additional 
information. 
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Bus Hold Request (HOLD) 

This input indicates some device other than the 
Am386DX/DXL CPU requires bus mastership. 

HOLD must remain asserted as long as any other de- 
vice is a local bus master. HOLD is not recognized while 
RESET is asserted. If RESET is asserted while HOLD is 
asserted, RESET has priority and places the bus into an 
idle state, rather than the hold acknowledge (high 
impedance) state. HOLD is level-sensitive and is a syn- 
chronous input. HOLD signals must always meet setup 
and hold times, t23 and t24, for correct operation. 

Bus Hold Acknowledge (HLDA) 

Assertion of this output indicates the Am386DX/DXL 
microprocessor has relinquished control of its local bus 
in response to HOLD asserted, and is in the Bus Hold 
Acknowledge state. 

The Hold Acknowledge state offers near-complete sig- 
nal isolation. In the Hold Acknowledge state, HLDA is 
the only signal being driven by the Am386DX/DXL mi- 
croprocessor. The other output signals or bidirectional 
signals (D3 1-D0 , BE3-BE0, A31-A2, W/R, D/C, M/To, 
LOCK, and ADS) are in a high-impedance state so the 
requesting bus master may control them. Pull-up resis- 
tors may be desired on several signals to avoid spurious 
activity when no bus master is driving them. See Resis- 
tor Recommendations. Also, one rising edge occurring 
on the NMI input during Hold Acknowledge is remem- 
bered for processing after the HOLD input is negated. 

In addition to the normal usage of Hold Acknowledge 
with DMA controllers or master peripherals, the near- 
complete isolation has particular attractiveness during 
system test when test equipment drives the system and 
in hardware-fault-tolerant applications. 



Coproce ssor Interface Signals (PEREQ, busy, 
error) 

Introduction 

In the following sections are descriptions of signals dedi- 
cated to the numeric coprocessor interface. In addition 
to the data bus, address bus, and bus cycle definition 
signals, these following signals control communication 
between the Am386DX/DXL microprocessor and its 
387DX math coprocessor extension. 

Coprocessor Request (PEREQ) 

When asserted, this input signal indicates a coproces- 
sor request for a data operand to be transferred to/from 
memory by the Am386DX/DXL microprocessor. In re- 
sponse, the Am386DX/DXL CPU transfers information 
between the coprocessor and memory. Because 
Am386DX/DXL microprocessor has internally stored 
the coprocessor op-code being executed, it performs 
the requested data transfer with the correct direction 
and memory address. 

PEREQ is level-sensitive and is allowed to be asynchro- 
nous to the CLK2 signal. 



Coprocessor Busy (BUSY) 

When asserted, this input indicates the coprocessor is 
still executing an instruction and is not yet able to accept 
another. When the Am386DX/DXL microprocessor en- 
counters any coprocessor instruction that operates on 
the numeric stack (e.g., load, pop, or arithmetic opera- 
tion) or the WAIT instruction, this input is first automati- 
cally sampled until it is seen to be negated. This sam- 
pling of the BUSY input prevents overrunning the execu- 
tion of a previous coprocessor instruction. 

The FNINIT and FNCLEX coprocessor instructions are 
allowed to execute even if BUSY is asserted, since 
these instructions are used for coprocessor initialization 
and exception-clearing. 



BUSY is level-sensitive and is allowed to be asynchro- 
nous to the CLK2 signal. 



BUSY serves an additional function. If BUSY is sampled 
Low at the falling edge of RESET, the Am386DX/DXL 
microprocessor performs an internal self-test (see Bus 
Activity During and Following Reset). If BUSY is sam- 
pled High, no self-test is performed. 



Coprocessor Error (ERROR) 

This input signal indicates that the previous coprocessor 
instruction generated a coprocessor error of a type 
not masked by the coprocessor's control register. This 
input is automatically sampled by the Am386DX/DXL 
microprocessor when a coprocessor instruction is en- 
countered, and if asserted, the Am386DX/DXL device 
generates Exception 16 to access the error-handling 
software. 

Several coprocessor instructions, generally those that 
clear the numeric error flags in the coprocessor or 
save coprocessor state, do execute without the 
Am386DX/DXL microprocessor generating Exception 
16 even if ERROR is asserted. These instructions are 
FNINIT, FNCLEX, FSTSW, FSTSWAX, FSTCW, 
FSTENV, FSAVE, FESTENV, and FESAVE. 



ERROR is level-sensitive and is allowed to be asynchro- 
nous to the CLK2 signal. 

Interrupt Signals (INTR, NMI, RESET) 

Introduction 

The following descriptions cover inputs that can inter- 
rupt or suspend execution of the processor's current 
instruction stream. 

Maskable Interrupt Request (INTR) 

When asserted, this input indicates a request for inter- 
rupt service, which can be masked by the Am386DX/ 
DXL CPU Flag Register IF bit. When the Am386DX/DXL 
microprocessor responds to the INTR input, it performs 
two interrupt acknowledge bus cycles, and at the end of 
the second, latches an 8-bit interrupt vector on D1 7-DO 
to identify the source of the interrupt. 
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INTR is level-sensitive and is allowed to be asynchro- 
nous to the CLK2 signal. To assure recognition of an 
INTR request, INTR should remain asserted until the 
first interrupt acknowledge bus cycle begins. 

Non-Maskable Interrupt Request (NMI) 

This input indicates a request for interrupt service, which 
cannot be masked by software. The non-maskable in- 
terrupt request is always processed according to the 
pointer or gate in slot 2 of the interrupt table. Because of 
the fixed NMI slot assignment, no interrupt acknowledge 
cycles are performed when processing NMI. 

NMI is rising edge-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. To assure recognition of 
NMI, it must be negated for at least eight CLK2 periods, 
and then be asserted for at least eight CLK2 periods. 

Once NMI processing has begun, no additional NMI's 
are processed until after the next IRET instruction, 
which is typically the end of the NMI service routine. If 
NMI is re-asserted prior to that time, however, one rising 
edge on NMI will be remembered for processing after 
executing the next IRET instruction. 

Reset (RESET) 

This input signal suspends any operation in progress 
and places the Am386DX/DXL microprocessor in a 
known reset state. The Am386DX/DXL device is reset 
by asserting RESET for 1 5 or more CLK2 periods (80 or 



more CLK2 periods before requesting self -tes t). W hen 
RESET is asserted, all other input pins, except FLT, are 
ignored, and all other bus pins are driven to an idle bus 
state as shown in Table 15. If RESET and HOLD are 
both asserted at a point in time, RESET takes priority 
even if the Am386DX/DXL device was in a Hold Ac- 
knowledge state prior to RESET asserted. 

RESET is level-sensitive and must be synchronous to 
the CLK2 signal. If desired, the phase of the internal 
processor clock and the entire Am386DX/DXL CPU 
state can be completely synchronized to external cir- 
cuitry by ensuring the RESET signal falling edge meets 
its applicable setup and hold times, t25 and t26. The 
signal summary is shown in Table 1 6. 

Table 15. Pin State (Idle Bus) During Reset 



Pin Name 


Signal Level During Reset 


ADS 


High 


D31-D0 


High Impedance 


BE3-BE0 


Low 


A31-A2 


High 


W/R 


Low 


D/C 


High 


M/io 


Low 
High 


LOCK 


HLDA 


Low 



Table 16. Am386DX/DXL Microprocessor Signal Summary 



Signal 
Name 


Function 


Active 
State 


Input/ 
Output 


Input Synch 

or Asynch to 

CLK2 


Output High 

Impedance During 

HLDA? 


CLK2 

D31-D0 

BE3-BE0 

A31-A2 

W/R 

D/C 

M/TO 


Clock 
Data Bus 
Byte Enables 
Address Bus 
Write-Read Indication 
Data-Control Indication 
Memory-I/O Indication 
Bus Lock Indication 
Address Status 
Next Address Request 
Bus Size 16 
Transfer Acknowledge 
Bus Hold Request 
Bus Hold Acknowledge 
Coprocessor Request 
Coprocessor Busy 
Coprocessor Error 
Maskable Interrupt Request 
Non-Maskable Intrpt Request 
Reset 


High 
Low 
High 
High 
High 
High 
Low 
Low 
Low 
Low 
Low 
High 
High 
High 
Low 
Low 
High 
High 
High 


I 

I/O 



o 



o 




I 
I 
I 
I 

o 
I 
I 
I 
I 
I 
I 


S 

S 
S 
S 
S 

A 
A 
A 
A 
A 
S 


Yes 
Yes 
Yes 
Yes 
Yes 
Yes 
Yes 
Yes 

No 


LOCK 
ADS 
NA 
BST6 


READY 
HOLD 
HLDA 
PEREQ 


BUSY 


ERROR 
INTR 
NMI 
RESET 
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Bus Transfer Mechanism 
Introduction 

All data transfers occur as a result of one or more bus 
cycles. Logical data operands of byte, word, and Dword 
lengths may be transferred without restrictions on 
physical address alignment. Any byte boundary may be 
used, although two or even three physical bus cycles 
are performed as required for unaligned operand 
transfers. See Dynamic Data Bus Sizing and Operand 
Alignment. 

The Am386DX/DXL microprocessor address signals 
are designed to simplify external system hardware. 
Higher-order address bits are provided by A31-A2. 
Lower-order address in the form of BE3-BE0 directly 
provides linear selects for the four bytes of the 32-bit 
data bus. Physical operand size information is thereby 
implicitly provided for each bus cycle in the most usable 
form. 

Byte Enable outputs, BE3-BE0, are asserted when their 
associated data bus bytes are involved with the present 
bus cycle, as listed in Table 17. During a bus cycle, any 
possible pattern of contiguous asserted Byte Enable 
outputs can occur, but never patterns having a negated 
Byte Enable separating two or three asserted Enables. 

Address bits AO and A1 of the physical operand's 
base address can be created when necessary (for 



instance, for MULTIBUS I or MULTIBUS II interface), as 
a function of the lowest-order asserted Byte Enable. 
This is shown by Table 1 8. Logic to generate AO and A1 
is given by Figure 43. 

Table 17. Byte Enables and Associated 
Data and Operand Bytes 



Byte Enable Signal 


Associated Data Bus Signals 


BEO 


D7-D0 (Byte 0— least significant) 


BET 


D15-D8(Byte1) 


BE2 


D23-D16(Byte2) 


BE3 


D31-D24 (Byte 3— most significant) 



Each bus cycle is composed of at least two bus states 
and each bus state requires one processor clock period. 
Additional bus states added to a single bus cycle are 
called wait states. See Bus Functional Description. 

Since a bus cycle requires a minimum of two bus 
states (equal to two processor clock periods), data can 
be transferred between external devices and the 
Am386DX/DXL CPU at a maximum rate of one 4-byte 
Dword every two processor clock periods, for a 
maximum bus bandwidth of 80 Mb/s (Am386DX/DXL 
microprocessor operating at 40-MHz processor clock 
rate). 



BE2 



BEO 







L 


\ 


-I 




L 


L 


X 


(h\ 


L 


L 


L 


X 


H 


L 


H 


H 


L 


L 


X 


L 


X 


X 


, H J 


X 


L 




L 


h 


H 


L 





BE3 



BE1 
K - Map for A1 Signal 



BEO, 



=o^ 



BE1 



BE2- 



BEO 



H 



4 



H BE3 




S^=^ 



H 
BET 
K - Map for AO Signal 

Figure 43. Logic to Generate AO, A1 from BE3-BE0 
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Table 18. Generating A31-A0 from BE3-BE0 and A31-A2 



Am386DX/DXL CPU Address Signals 


A31 




A2 


BE3 


BE2 


BE1 


BEO 




A31 


Physical Base 
Address 












A2 


A1 


AO 




A31 




A2 








X 


X 


X 


Low 




A31 




A2 





1 


X 


X 


Low 


High 




A31 




A2 


1 





X 


Low 


High 


High 




A31 




A2 


1 


1 


Low 


High 


High 


High 





FFFFFFFFH 



00000000H 




800000FFH 
800000F8H 
(See note) 



0000FFFFH 



00000000H 



Not 
Accessible 



Not 
Accessible /'/, 



64Kb 



Math Coprocessor 
(387DX) 



Accessible 
Programmed 
I/O Space 



Physical Memory Space 



I/O Space 



Note: Since A31 is High during automatic communication with coprocessor, A31 High and M/IO Low can be used to 
easily generate a coprocessor select signal. 



Figure 44. Physical Memory and I/O Spaces 
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Memory and I/O Spaces 

Bus cycles may access physical memory space or I/O 
space. Peripheral devices in the system may either be 
memory-mapped, or l/O-mapped, or both. As shown in 
Figure 44, physical memory addresses range from 
00000000H to FFFFFFFFH (4 Gb) and I/O addresses 
from 00000000H to 0000FFFFH (64 Kb) for pro- 
grammed I/O. Note the I/O addresses used by the auto- 
matic I/O cycles for coprocessor communication are 
800000F8H to 800000FFH, beyond the address range 
of programmed I/O, to allow easy generation of a 
coprocessor chip select signal using the A31 and M/Io 
signals. 

Memory and I/O Organization 

The Am386DX/DXL microprocessor datapath to mem- 
ory and I/O spaces can be 32- or 1 6-bits wide. When 
32-bits wide, memory and I/O spaces are organized 
naturally as arrays of physical 32-bit Dwords. Each 
memory or I/O Dword has four individually addressable 
bytes at consecutive byte addresses. The lowest-ad- 
dressed byte is associated with data signals D17-D0; 
the highest-addressed byte with D31-D24. 

The Am386DX/DXL microprocessor includes a bus 
control input, BS16, that also allows direct connection to 
1 6-bit memory or I/O spaces organized as a sequence 
of 16-bit word. Cycles to 32- and 16-bit memory or I/O 
devices may occur in any sequence, since the BS16 
control is sampled du ring each bus cycle. (See Dynamic 
Data Bus Sizing.) The Byte Enable signals, BE3-BE0, 
allow byte granularity when addressing any memory or 
I/O structure, whether 32- or 1 6-bits wide. 

Dynamic Data Bus Sizing 

Dynamic Data Bus Sizing is a feature allowing direct 
processor connection to 32- or 16-bit data buses for 
memory or I/O. A single processor may connect to both 
size buses. Transfers to or from 32- or 16-bit ports are 
supported by dynamically determining the bus width 
during each bus cycle. During each bus cycle an 
addre ss dec oding circuit or the slave device itself may 
assert BS16 for 1 6-bit ports, or negate BS16 for 32-bit 
ports. 



With BS16 asserted, the processor automatically 
converts operand transfers larger than 16 bits, or mis- 
aligned 16-bit transfers, into two or three transfers as 
required. All operand transfers physically occur on 
D15-D0 when BS16 is asserted. Therefore, 16-bit 
memories or I/O devices only connect on data signals 
D15-D0. No extra transceivers are required. 



Asserting BS16 only affects the processor when BE2 
and/or BE3 are asserted during the current cycle. If only 
D15-D0 are involved with the transfer, asserting BS16 
has no affect since the transfer can proceed normally 
over a 16-bit bus whether BS16 is asserted or not. In 
other words, asserting BS16 has no effect when only the 
lower half of the bus is involved with the current cycle. 



There are two types of situations where the processor is 
affected by asserting BS16, depending on which Byte 
Enables are asserted during the current bus cycle. 

Upper Half Only: 

Only BE2 and/or BE3 asserted. 

Upper and Lower Half: 

At le ast BE 1, B E2 asserted (and perhaps also 
BEO and/or BE3). 



Effect of asserting BS16 during Upper Half Only read 
cycles: 

Asserting BS1 6 during Upper Half Only reads causes the 
Am386DX/DXL microprocessor to read data on the lower 
1 6 bits of the data bus and ignore data on the upper 1 6 bits 
of the data bus. Data that would have been read from 
D31-D16 (as indicated by BE2 and BE3) will instead be 
read from D15-D0, respectively. 



Effect of asserting BS1 6 during Upper Half Only write 
cycles: 

Asserting BS1 6 during Upper Half Only writes does not af- 
fect the Am386DX/DXL microprocessor. When only BE2 
and/or BE3 are asserted during a Write cycle, the 
Am386DX/DXL microprocessor always duplicates data 
signals D31 -D1 6 onto D1 5-DO (see Table 1 3). Therefore, 
no further Am386DX/DXL CPU action is required to per- 
form these writes on 32- or 16-bit buses. 



Effect of asserting BS16 during Upper and Lower Half 
read cycles: 

Asserting BS16 during Upper and Lower Half reads 
causes the processor to perform two 1 6-bit read cycles for 
complete physical operand transfer. Bytes and 1 (as in- 
dicated by BEO and BET) are read on the first cycle using 
D1 5-DO. Bytes 2 and 3 (as indicated by BE2 and BE3) are 
read during the second cycle, again using D1 5-DO. 
D31-D16 are ignored during both 16-bit cycles. BEO and 
BE1 are always negated during the second 16-bit cycle. 
See Figure 54 Cycles 2 and 2a. 



Effect of asserting BS16 during Upper and Lower Half 
write cycles: 

Asserting BS16 during Upper and Lower Half writes 
causes the Am386 DX/DXL microprocessor to perform two 
1 6-bit write cycles for complete physical operand transfer. 
All bytes are available the first write cycle allowing external 
hardware to receive Bytes and 1 (as indicated by BEO 
and BE1) using D15-D0. On the second cycle the 
Am386DX/DXL microprocessor duplicates Bytes 2 and 3 
on D15-D0 and Bytes 2 and 3 (as indicated by BE2 and 
BE3) are written using D1 5-DO. BEO and BET are always 
negated during the second 1 6-bit cycle. BS16 must be as- 
serted during the second 16-bit cycle. See Figure 54 Cy- 
cles 1 and 1 a. 

Interfacing with 32- and 16-Bit Memories 

In 32-bit-wide physical memories such as Figure 45, 
each physical Dword begins at a byte address that is a 
multiple of 4. A31-A2 are directly used as a Dword 
selects and BE3-BE0 as byte selects. BS16 is negated 
for all bus cycles involving the 32-bit array. 
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When 1 6-bit-wide physical arrays are included in the 
system, as in Figure 46, each 16-bit physical word be- 
gins at an address that is a multiple of 2. Note the ad- 
dress is decoded to assert BS16 only during bus cycles 
involving the 16-bit array. If desiring to use pipelined 
address with 1 6-bit memories, then BE3-BE0 and W/R 
are also decoded to determine when BS16 should be 
asserted. (See Pipelined Address with Dynamic Data 
Bus Sizing.) 

A31-A2 are directly usable for addressing 32- and 
16-bit devices. To address 16-bit devices, A1 and two 
Byte Enable signals are also needed. 



AMD ir^ 

To generate an A1 signal and two Byte Enable signals 
for 16-bit access, BE3-BE0 should be decoded as in 
Table 19. Note that certain combinations of BE3-BE0 
are never generated by the Am386DX/DXL micropro- 
cessor, leading to "don't care" conditions in the decoder. 
Any BE3-BE0 decoder, such as shown in Figure 47, 
may use the non-occurring BE3-BE0 combinations to 
its best advantage. 



Am386DX/DXL 
Microprocessor 



j^- 



BS16 

High 



Data Bus (D31-D0) 



Address Bus (BE3-BE0, A31-A2) 



32-Bit 
Memory 



Figure 45. Am386DX/DXL Microprocessor with 32-Bit Memory 
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Am386DX/DXL 
Microprocessor 



Data Bus (D31-D0) 

— c-£ 



BS16 



Address 
Decoder 



Address Bus 



(BE3-BE0, A31-A2) 



32-Bit 
Memory 



\ 16 Data Bus (D15-D0) 
N 7^ ► 
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Figure 46. Am386DX/DXL Microprocessor with 32-Bit and 16-Bit Memory 
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Table 19. Generating A1, BHE, and ble for Addressing 16-Bit Devices 


Am386DX/DXL CPU Signals 


16-Bit Bus Signals 


Comments 


BE3 


BE2 


BE1 


BEO 


A1 


BHE 


BLE (AO) 


H* 


H* 


H* 


H* 


X 


X 


X 


X — no active bytes 


H 


H 


H 


L 


L 


H 


L 




H 


H 


L 


H 


L 


L 


H 




H 


H 


L 


L 


L 


L 


L 




H 


L 


H 


H 


H 


H 


L 




H* 


L* 


H* 


L* 


X 


X 


X 


X — non-contiguous bytes 


H 


L 


L 


H 


L 


L 


H 




H 


L 


L 


L 


L 


L 


L 




L 


H 


H 


H 


H 


L 


H 




L* 


H* 


H* 


L* 


X 


X 


X 


X — non-contiguous bytes 


L* 


H* 


L* 


H* 


X 


X 


X 


X— non-contiguous bytes 


L* 


H* 


L* 


L* 


X 


X 


X 


X— non-contiguous bytes 


L 


L 


H 


H 


H 


L 


L 




L* 


L* 


H* 


L* 


X 


X 


X 


X — non-contiguous bytes 


L 


L 


L 


H 


L 


L 


H 




L 


L 


L 


L 


L 


L 


L 





BLE asserted when D7-D0 of 16-bit bus is active. 
BHE asserted when D15-D8 of 16-bit bus is active. 
A1 Low for all even words; A1 High for all odd words. 

Key: X = "Don't Care" 
H = High voltage level 
L = Low voltage level 
* =A non-occurring pattern of Byte Enables; either none are asserted or the pattern has Byte Enables asserted for non-contiguous bytes. 



Operand Alignment 

With the flexibility of memory addressing on the 
Am386DX/DXL microprocessor, it is possible to transfer 
a logical operand that spans more than one phy- 
sical Dword or Word of memory or I/O. Examples are 
32-bit Dword operands beginning at addresses not 
evenly divisible by 4- or a 16-bit Word operand split 
between two physical Dwords of memory array. 

Operand alignment and data bus size dictates when 
multiple bus cycles are required. Table 20 describes the 
transfer cycles generated for all combinations of logical 
operand lengths, alignment, and data bus sizing. When 
multiple bus cycles are required to transfer a multi-byte 
logical op erand, the highest-order bytes are transferred 
first (but if BS16 asserted requires two 16-bit cycles be 
performed, that part of the transfer is lowest-order first). 

Bus Functional Description 
Introduction 

The Am386DX/DXL microprocessor has separate, par- 
allel buses for data and address. The data bus is 32 bits 
in width and is bidirectional. The address bus provides 
a 32-bit value using 30 signals for the 30 upper-order 
address bits and 4 Byte Enable signals to directly indi- 
cate the active bytes. These buses are interpreted and 
controlled via several associated definition or control 
signals. 



The definition of each bus cycle is given by three defini- 
tion signals: M/IO, W/R, and D/C. At the same time, a 
valid addr ess is present on the Byte Enable signals 
BE3-B E0 an d other address signals, A31-A2. A status 
signal, ADS, indicates when the Am386DX/DXL CPU 
issues a new bus cycle definition and address. 

Collectively, the address bus, data bus, and all associ- 
ated control signals are referred to simply as the bus. 

When active, the bus performs one of the bus cycles 
below. 

1. 
2. 
3. 
4. 
5. 
6. 
7. 
8. 



Read from memory space. 
Locked read from memory space. 
Write to memory space. 
Locked write to memory space. 
Read from I/O space (or coprocessor). 
Write to I/O space (or coprocessor). 
Interrupt acknowledge. 
Indicate halt or indicate shutdown. 



Table 1 4 shows the encoding of the bus cycle definition 
signals for each bus cycle. See Section Bus Cycle 
Definition. 

The data bus has a dynamic sizing feature supporting 
32- and 1 6-bit bus size. Data bus size is indicated to the 
Am386 DX/DXL microprocessor using its Bus Size 16 
(BS16) input. All bus functions can be performed with 
either data bus size. 



78 



Am386 Microprocessors for Personal Computers 



BEO 
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K - Map for A1 Signal (same as Figure 43) 

BEO 



BE2 









H 




L 


L 


X 


L 


L 


L 


L 


'x 


H 1 


L 


H 


H 


L 


^H 


X J 


L 


X 


X 


L 


X 


L 




L 


r 


■\ 


L 





H BE3 



BE1 
K - Map for 1 6-bit BHE signal 
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H 




BE1 . 

=o-[> 



BHE 



BEO 



BE2 
BEO 



£>-£> 



BLE (or AO) 



iF^> 



BE1 
K - Map for 1 6-bit BLE signal (same as AO signal in Figure 43). 15021 B-050 

Figure 47. Logic to Generate A1, bhe, and ble for 16-Bit Buses 



Table 20. Transfer Bus Cycles for Bytes, Words, and Dwords 





Byte-Length of Logical Operand 


1 


2 


4 


Physical Byte Address in Memory (low-order bits) 


XX 


00 


01 


10 


11 


00 


01 


10 


11 


Transfer Cycles over 32-bit Data Bus 


b 


w 


w 


w 


hb,* 
lb 


d 


hd 
13 


hw, 
lw 


h3, 
lb 


Transfer Cycles over 1 6-bit Data Bus 


b 


w 


lb, 
hb 


w 


hb, 
lb 


lw, 
hw 


hb, 


hw, 
lw 


mw, 
hb, 


lb, 
mw 






lb 



Key: b = Byte transfer 
w= Word transfer 
I = low-order portion 
m = mid-order portion 



3 = 3-byte transfer 
d = Dword transfer 
h = high-order portion 
x = Don't care 

= BS1 6 asserted causes second bus cycle. 
For this case, 8086, 8088, 80186, 80188, 80286 transfer lb first, then hb. 
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CLK2 (Input) [ 



M/IO, BE3-BE0, r \S~ 



A31-A2, D/C, W/R 
(Outputs) 

ADS (Output) [_ 

NA r 

(Input) L 

READY f 

(Input) 



LOCK r V~" 

(Output) L — ^ ^- 



Cycle 1 

Non-Pipelined 

(Read) 



T1 



S 



D31-D0 [ In > ~ 

(Input during Read) | 



T2 
4»1 I (t>2 



Valid 1 



>C 



V 



Valid 1 



Cycle 2 

Non-Pipelined 

(Read) 



T1 
M l <}>2 



T2 
♦ 1 I ^2 



Valid 2 



y 



K 



K 



"V 



Valid 2 



-<jnT> 



Cycle 3 

Non-Pipelined 

(Read) 



T1 



M | <I>2 



T2 
<M I *2 



LTL"U 



Valid 3 



■S 



y 



>c 



xd 



X. 



Valid 3 



-<j£> 



<t>1 



./ 



>e 



--< |n3 > 



Fastest non-pipelined bus cycles consist of T1 and T2 
Figure 48. Fastest Read Cycles with Non-Pipelined Address Timing 
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When the Am386DX/DXL CPU bus is not performing 
one of the activities listed above, it is either Idle or in the 
Hold Acknowledge state, which may be detected by ex- 
ternal circuitry. The Idle state can be identified by the 
Am386DX/DXL microprocessor giving no further asser- 
tions on its address strobe output (ADS) since the begin- 
ning of its most recent bus cycle, and the most recent 
bus cycle has been terminated. The Hold Acknowledge 
state is identified by the Am386DX/DXL CPU asserting 
its Hold Acknowledge (HLDA) output. 

The shortest time unit of bus activity is a bus state. A bus 
state is one processor clock period (two CLK2 periods) 
in duration. A complete data transfer occurs during a 
bus cycle, composed of two or more bus states. 

The fastest Am386DX/DXL microprocessor bus cycle 
requires only two bus states. For example, three con- 
secutive bus read cycles, each consisting of two bus 
states, are shown by Figure 48. The bus states in each 
cycle are named T1 and T2. Any memory or I/O address 
may be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. The high-bandwidth, 
two-clock bus cycle realizes the full potential of fast main 
memory, or cache memory. 

Every bus cycle continues until it is acknowledged 
by the external syste m hardw are, using the Am386DX/ 
DXL microprocessor READY input. Acknowledging the 
bus cycle at the end of the first T2 results in the shortest 



bus cycle, requiring only T1 and T2. If READY is not 
immediately assert ed, howe ver, T2 states are repeated 
indefinitely until the READY input is sampled asserted. 

Address Pipelining 

The address pipelining option provides a choice of bus 
cycle timings. Pipelined or non-pipelined address timing 
is selectable on a cycle-by-cycle basis with the Next 
Address (NA) input. 

When address pipelining is not selected, the current ad- 
dress and bus cycle definition remain stable throughout 
the bus cycle. 

When address pipelining is selected, toe address 
(BE3-BE0, A31-A2) and definition (W/R, D/C, and 
M/IO) of the next cycle are available before the end of 
the current cycle. To signal their availability, the 
Am386DX/DXL microprocessor address status output 
(ADS) is also asserted. Figure 49 illustrates the fastest 
read cycles with pipelined address timing. 

Note from Figure 49, the fastest bus cycles using 
pipelined address require only two bus states, named 
T1 P and T2P. Therefore, cycles with pipelined address 
timing allow the same data bandwidth as non-pipelined 
cycles, but address-to-data access time is increased 
compared to that of a non-pipelined cycle. 
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a 



Cycle 1 

Pipelined 

(Read) 



Cycle 2 

Pipelined 

(Read) 



Cycle 3 

Pipelined 

(Read) 



CLK2 (Input) [ 



M/IO, BE3-BE0, r 
A31-A2, D/C, W/R L 
(Outputs) 



(Input during Read) 




(Output) 



D31-D0 £ -jy 



Fastest pipelined bus cycles consist of T1 P and T2P 
Figure 49. Fastest Read Cycles with Pipelined Address Timing 
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By increasing the address-to-data access time, 
pipelined address timing reduces wait state require- 
ments. For example, if one wait state is required with 
non-pipelined address timing, no wait states would be 
required with pipelined address. 

Pipelined address timing is useful in typical systems 
having address latches. In those systems, once an ad- 
dress has been latched, pipelined availability of the next 
address allows decoding circuitry to generate chip se- 
lects (and other necessary select signals) in advance, 
so selected devices are accessed immediately when 
the next cycle begins. In other words, the decode time 
for the next cycle can be overlapped with the end of the 
current cycle. 

If a system contains a memory structure of two or more 
interleaved memory banks, pipelined address timing 
potentially allows even more overlap of activity. This is 
true when the interleaved memory controller is designed 
to allow the next memory operation to begin in one 
memory bank while the current bus cycle is still activat- 
ing another memory bank. Figure 50 shows the general 
structure of the Am386DX/DXL microprocessor with 
two-bank and four-bank interleaved memory. Note each 
memory bank of the interleaved memory has full data 
bus width (32-bit data width typically, unless 1 6-bit bus 
size is selected). 



Further details of pipelined address timing are given in 
Pipelined Address; Initiating and Maintaining Pipelined 
Address; Pipelined Address with Dynamic Bus Sizing; 
and, Maximum Pipelined Address Usage With 16-bit 
Bus Size. 

Read and Write Cycles 

Introduction 

Data transfers occur as a result of bus cycles, classified 
as Read or Write cycles. During Read cycles, data is 
transferred from an external device to the processor. 
During Write cycles, data is transferred in the other di- 
rection, from the processor to an external device. 

Two choices of address timing are dynamically select- 
able: non-pipelined or pipelined. After a bus idle state, 
the processor always uses non-pipelined address tim- 
ing. However, the NA (Next Address) input may be as- 
serted to select pipelined address timing for the next bus 
cycle. When pipelining is selected and the Am386DX/ 
DXL microprocessor has a bus request pending inter- 
nally, the address and definition of the next cycle is 
made available even before the current bus_ cycle is 
acknowledged by READY. Generally, the NA input is 
sampled each bus cycle to select the desired address 
timing for the next bus cycle. 
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Two-Bank Interleaved Memory: 

a. Address signal A2 selects bank 

b. 32-bit datapath to each bank 
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Four-Bank Interleaved Memory: 

a. Address signals A3 and A2 select bank 

b. 32-bit datapath to each bank 
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Figure 50. Two-Bank and Four-Bank Interleaved Memory Structure 
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Two choices of physical data bus width are dynamically 
selectable: 32 bits or 1 6 bits. Generally, the BS16 (Bus 
Size 1 6) input is sampled near the end of the bus cycle to 
confirm the physical data bus size applicable to the 
current cycle. Negation of BS16 indicates a 32-bit size 
and assertion indicates a 16-bit bus size. 

If 16-bit bus size is indicated, the Am386DX/DXL CPU 
automatically responds as required to complete the 
transfer on a 1 6-bit data bus. Depending on the size and 
alignment of the operand, another 16-bit bus cycle may 
be required. Table 19 provides all details. When neces- 
sary, the Am386DX/DXL microprocessor performs an 
additional 16-bit bus cycle, using D15-D0 in place of 
D31-D16. 

Terminating a Read cycle or Write cycle, like any bus cy- 
cle, requ ires acknowledging the cycle by asserting the 
READY input. Until acknowledged, the processor in- 
serts wait states into the bus cycle to allow adjustment 



for the speed of any external device. External hardware, 
that has decoded the address and bus cycle type as- 
serts the READY input at the appropriate time. 

At the end of the second bus state within the bus cycle, 
READY is sampled. At that time, if exter nal hardw are 
acknowledges the bus cycle by asserting READY, the 
bus cycle terminates as shown in Figure 51 . If READY is 
negated as in Figure 52, the cycle continues another 
bus state (a wait state) and READY is sampled again at 
the end of that state. This continues indefinitely until the 
cycle is acknowledged by READY asserted. 

When the current cycle is acknowledged, the 
Am386DX/DXL microprocessor terminates it. When a 
Read cycle is acknowledged, the Am386DX/DXL CPU 
latches the information present at its data pins. When a 
Write cycle is acknowledged, the Am386DX/DXL CPU 
write data remains valid throughout phase one of the 
next bus state to provide write data hold time. 
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Note: Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can 
immediately follow the write cycle. 
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Figure 51. Various Bus Cycles and Idle States with Non-Pipelined Address (Zero Wait States) 



Non-Pipelined Address 

Any bus cycle may be performed with non-pipelined ad- 
dress timing. For example, Figure 51 shows a mixture of 
Read and Write cycles with non-pipelined address tim- 
ing. Figure 51 shows that the fastest possible cycles 
with non-pipelined address have two bus states per bus 
cycle. The states are named T1 and T2. In phase one of 
the T1 , the address signals and bus cycle definition sig- 
nals are driven valid, and to signal their availability, 
address status (ADS) is simultaneously asserted. 



During Read or Write cycles, the data bus behaves as 
follows. If the cycle is a read, the Am386DX/DXL micro- 
processor floats its data signals to allow driving by the 
external device being addressed. The Am386DX/DXL 
device requires that all data bus pins be at a valid logic 
state (High or Low) at the end of each read cycle, when 
READY is asserted, even if all byte enables are not as- 
serted. The system must be designed to meet this re- 
quirement. If the cycle is a write, data signals are driven 
by the Am386DX/DXL device beginning in phase two of 
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T1 until phase one of the bus state following cycle 
acknowledgment. 

Figure 52 illustrates non-pipelined bus cyc les with one 
wait added to Cycles 2 and 3. READY is sampled 
negated at the end of the first T2 in Cycles 2 and 3. 
Therefore, Cycles 2 and 3 have T2 repeated. At the end 
of the second T2, READY is sampled asserted. 

When address pipelining is not used, the address and 
bus cycle definition remain valid during all wait states. 



When wait states are added and you desire to maintain 
non-pipelined address timing, it is necessary to negate 
NA during each T2 state except the last one, as shown in 
Figure 52 Cycles 2 and 3. If NA is sampled asserted 
during a T2 other than the last one, the next state 
would be T2I (for pipelined address) or T2P (for pipe- 
lined address) instead of another T2 (for non-pipelined 
address). 
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Note: Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can 

immediately follow the Write cycle. 15021 B-055 

Figure 52. Various Bus Cycles and Idle States with Non-Pipelined Address 
(Various Number of Wait States) 
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Bus States: 

T1 — First clock of a non-pipelined bus cycle (Am386DX/DXL microprocessor drives new address and asserts ADS). 

T2 — Subsequent clocks of a bus cycle when NA has not been sampled asserted in the current bus cycle. 

Ti — Idle state. 

Th — Hold Acknowledge state (Am386DX/DXL microprocessor asserts HLDA). 

The fastest bus cycle consists of two states: T1 and T2. 

Four basic bus st ates d escribe bus operation when not using pipelined address. These states do include BS16 usage for 32-bit and 1 6-bit bus 

size. If asserting BS16 requires second 16-bit bus cycle to be performed, it is performed before HOLD asserted acknowledged. 

Figure 53. Bus States (Not Using Pipelined Address) 
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Figure 53 illustrates the bus states and transitions when 
address pipelining is not used. The bus transitions be- 
tween four possible states: T1 , T2, Ti, and Th. Bus cy- 
cles consist of T1 and T2, with T2 being repeated for 
wait states. Otherwise, the bus may be idle in the Ti 
state, or in hold acknowledge, the Th state. 

When address pipelining is not used, the bus state dia- 
gram is as shown in Figure 53. When the bus is idle, it is 
in state Ti. Bus cycles always begin with T1 . T1 always 
leads to T2. If a bus cycle is not acknowledged during T2 
and NA is negated, T2 is repeated. When a cycle is ac- 
knowledged during T2, the following state will be T1 of 
the next bus cycle if a bus request is pending internally, 
or Ti if there is no bus request pending, or Th if the 
HOLD input is being asserted. 

The bus state diagram in Figure 53 also applies to the 
use of BS16. If the Am386DX/DXL microprocessor 
makes internal adjustments for 16-bit bus size, the 
adjustments do not affect the external bus states. If an 
additional 16-bit bus cycle is required to complete a 
transfer on a 16-bit bus, it also follows the state transi- 
tions shown in Figure 53. 



Use of pipelined address allows the Am386DX/DXL 
CPU to enter three additional bus states not shown 
in Figure 53. Figure 59 in Pipelined Address is the com- 
plete bus state diagram, including pipelined address 
cycles. 

Non-Pipelined Address With Dynamic Data Bus 
Sizing 

The physical data bus width for any non-pipelined bus 
cycle can be either 32 or 1 6 bits. At the beginning of the 
bus cycle, the processor behaves as if the data bus is 
32-bits wide. When the bus cycle is acknowledged by 
asserting READY at the end of a T2 state, the most 
recent sampling of BS16 determine s the d ata bus size 
for the cycle being acknowledged. If BS16 was most re- 
cently negated, the physical data bus size is defined as 
32 bits. If BS16 was most recently asserted, the size is 
defined as 16 bits. 



When BS16 is asserted and two 1 6-bit bus cycles are re- 
quired to complete the transfer, BS16 must be asserted 
during the second cycle; 1 6-bit bus size is not assumed. 
Like any bus cycle, the second 1 6-bit cycle must be ac- 
knowledged by asserting READY. 
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A transfer requiring two 
cycles on 1 6-bit data bus 

-a* 



A transfer requiring two 
cycles on 16-bit data bus 
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Figure 54. Asserting BS16 (Zero- Wait-States, Non-Pipelined Address) 
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A transfer requiring two 
cycles on 1 6-bit data bus 
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Figure 55. Asserting BS16 (One-Waif-State, Non-Pipelined Address) 
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When a second 1 6-bit bus cycle is required to complete 
the transfer over a 1 6-bit bus, the addresses generated 
for the two 1 6-bit bus cycles are closely related to each 
othe r. The addresses are the same, except BEO and 
BE1 are always negated for the second cycle. This is be- 
cause data on D15-D0 was already transferred during 
the first 16-bit cycle. 



Figures 54 and 55 show cases where assertion of BS16 
requires a second 16-bit cycle for complete operand 
transfer. Figure 54 illustrates cycles without wait states. 
Figure 55 illustrates cycles with one wait state. In Figure 
55 Cycle 1 , the bus cycle during which BS16 is asserted, 
note that NA must be negated in the T2 state(s) prior to 
the last T2 state. This is to allow the recognition of BS16 
asserted in the final T2 state. The relation of NA and 
BS16 is given fully in Pipelined Address, but Figure 55 
illustrates this only precaution you need to know when 
using BS16 with non-pipelined address. 

Pipelined Address 

Address pipelining is the option of requesting the ad- 
dress and the bus cycle definition of the next internally 
pending bus cycle before the current bus cycle is 
acknowledged with READY asserted. ADS is asserted 
by the Am386DX/DXL microprocessor when the next 
address is issued. The address pipelining option is 
controlled on a cycle-by-cycle basis with the NA input 
signal. 

Once a bus cycle is in progress and the current address 
has been valid for at least one entire bus state, the NA 
input is sampled at the end of every phase one until the 
bus cycle is acknowledged. During non-pipelined bus 
cycles, therefore, NA is sampled at the end of phase one 
in every T2. An example is Cycle 2 in Figure 56, during 
which NA is sampled at the end of phase one of every 
T2 (it was asserted once during the first T2 and has no 
further effect during that bus cycle). 

If NA is sampled asserted, the Am386DX/DXL micro- 
processor is free to drive the address and bus cycle defi- 
nition of the next bus cycle, and assert ADS, as soon as 
it has a bus request internally pending. It may drive the 
next address as early as the next bus state, whether the 
current bus cycle is acknowledged at that time or not. 

Regarding the details of address pipelining, the 

Am386DX/DXL CPU has the following characteristics. 

1. For NA to be sampled asserted, BS16 must be 

negated at the sampling window (see Figure 56 

Cycles 2 through 4, and Figure 57 Cycles 1 through 

4) . If NA and BS16 are both sampled asserted during 



the last T2 period of a bus cycle, BS16 asserted has 
priority. Therefore, if both are asserted, the current 
bus size is taken to be 1 6 bits and the next address is 
not pipelined. 

2. The next address may appear as early as the bus 
state after NA was sampled asserted (see Figure 56 
or 57). In that case, state T2P is entered immedi- 
ately, However, when there is not an internal bus 
request already pending, the next address will not be 
available immediately after NA is asserted and T2I 
is entered instead of T2P (see Figure 58 Cycle 3). 
Provided the current bus cycle is not yet acknow- 
ledged by READY asserted, T2P will be entered as 
soon as the Am386DX/DXL microprocessor does 
drive the next address. External hardware should 
therefore observe the ADS output as confirmation 
the next address is actually being driven on the bus. 

3. Once NA is sampled asserted, the Am386DX/DXL 
microprocessor commits itself to the highest priority 
bus request that is pending internally. It can no 
longer perform a nothe r 1 6-bit transfer to the same 
address should BS16 be asserted externally, so 
thereafter must assume the current bus size is 32 
bits. Therefore, if NA is sampled asserted within a 
bus cycle, BS16 must be negated thereafter in 
that bus cycle (see Figures 56, 57, 58). Con- 
sequently, do not assert NA during bus cycles that 
must have BS16 driven asserted. See Dynamic Bus 
Sizing with Pipelined Address. 

4. Any address which is validated by a pulse on the 
Am386DX/DXL CPU ADS output will remain stable 
on the address pins for at least two processor clock 
periods. The Am386DX/DXL microprocessor cannot 
produce a new address more frequently than every 
two processor clock periods (see Figures56,57,58). 

5. Only the address and bus cycle definition of the very 
next bus cycle is available. The pipelining capability 
cannot look further than one bus cycle ahead (see 
Figure 58 Cycle 1 ). 

The complete bus state transition diagram, including op- 
eration with pipelined address is given by Figure 59. 
Note it is a superset of the diagram for non-pipelined 
address only and the three additional bus states for 
pipelined address are drawn in bold. 

The fastest bus cycle with pipelined address consists of 
just two bus states, T1P and T2P (recall for non- 
pipelined address it is T1 and T2). T1 P is the first bus 
state of a pipelined cycle. 
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Note: Following any idle bus state (Ti), addresses are non-pipelined. Within non-pipelined bus cycles, NA is only sampled during wait 

states. Therefore, to begin address pipelining during a group of non-pipelined bus cycles requires a non-pipelined cycle with at least 
one wait state (Cycle 2 above). 
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Figure 56. Transitioning to Pipelined Address During Burst of Bus Cycles 
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Note: Following any idle bus state (Ti), the address is always non-pipelined and NA is only sampled during wait states. To start address pipelining 
after an idle state requires a non-pipelined cycle with at least one wait state (Cycle 1 above). The pipelined cycles (2, 3, 4 above) are shown 
with various numbers of wait states. 
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Figure 57. Fastest Transition to Pipelined Address Following Idle Bus State 
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Initiating and Maintaining Pipelined Address 

Using the state diagram Figure 59, observe the transi- 
tions from an idle state, Ti, to the beginning of a 
pipelined bus cycle, T1 P. From an idle state Ti, the first 
bus cycle must begin with T1 , and is therefore a non- 
pipelined bus cycle. The next bus cycle will be pipelined, 
however, provided NA is asserted and the first bus cycle 
ends in aT2P state (the address for the next bus cycle is 
driven during T2P). The fastest path from an idle state to 
a bus cycle with pipelined address is shown in below: 
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T1-T2-T2P are the states of the bus cycle that estab- 
lishes address pipelining for the next bus cycle, which 
begins with T1 P. The same is true after a bus hold state, 
shown below: 
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The transition to pipelined address is shown functionally 
by Figure 57 Cycle 1 . Note that Cycle 1 is used to transi- 
tion into pipelined address timing for the subsequent 
Cycles 2, 3, and 4 that are pipelined. The NA input is as- 
serted at the appropriate time to select address pipe- 
lining for Cycles 2, 3, and 4. 

Once a bus cycle is in progress and the current address 
has become valid, the NA input is sampled at the end of 
every phase one, beginning with the next bus state, until 
the bus cycle is acknowledged. During Figure 57 Cycle 
1 therefore, sampling begins in T2. Once NA is sampled 
asserted during the current cycle, the Am386DX/DXL 
microprocessor is free to drive a new address and bus 
cycle definition on the bus as early as the next bus state. 
In Figure 56 Cycle 1 for example, the next address 
is driven during state T2P. Thus, Cycle 1 makes the 
transition to pipelined address timing, since it begins 



with T1 but ends with T2P. Because the address for Cy- 
cle 2 is available before Cycle 2 begins, Cycle 2 is called 
a pipelined bus cycle, and it begins with T1P. Cycle 2 
begins as soon as READY asserted terminates Cycle 1 . 

Example transition bus cycles are Figure 57 Cycle 1 and 
Figure 56 Cycle 2. Figure 57 shows transition during the 
very first cycle after an idle bus state, which is the fastest 
possible transition into address pipelining. Figure 56 
Cycle 2, shows a transition cycle occurring during a 
burst of bus cycles. In any case, a transition cycle is the 
same whenever it occurs: it consists at least of T1 , T2 
(you assert NA at that time), and T2P (provided the 
Am386DX/DXL microprocessor has an internal bus 
request already pending, which it almost always has). 
T2P states are repeated if wait states are added to the 
cycle. 

Note three states (T1 , T2, and T2P) are only required in 
a bus cycle performing a transition from non-pipelined 
address into pipelined address timing; for example, 
Figure 57 Cycle 1. Figure 57 Cycles 2, 3, and 4 show 
that address pipelining can be maintained with two- 
state bus cycles consisting only of T1 P and T2P. 

Once a pipelined bus cycle is in progress, pipelined tim- 
ing is maintained for the next cycle by asserting NA and 
detecting that the Am386DX/DXL CPU enters T2P dur- 
ing the current bus cycle. The current bus cycle must 
end in state T2P for pipelining to be maintained in the 
next cycle. T2P is identified by the assertion of ADS. Fig- 
ures 56 and 57 however, show pipelining ending after 
Cycle 4, because Cycle 4 ends in T2P. This indicates 
the Am386DX/DXL CPU did not have an internal bus re- 
quest prior to the acknowledgment of Cycle 4. If a cycle 
ends with a T2 or T2I, the next cycle will not be pipelined. 

Realistically, address pipelining is almost always main- 
tained as long as NA is sampled asserted. This is so, 
because in the absence of any other request a code 
prefetch request is always internally pending until the 
instruction decoder and code prefetch queue are 
completely full. Therefore, address pipelining is main- 
tained for long bursts of bus cycles, if the bus is available 
(i.e., HOLD negated) and NA is sampled asserted in 
each of the bus cycles. 
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Figure 58. Details of Address Pipelining During Cycles with Wait States 
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HOLD Asserted 



HOLD Negated • 
No Request 



NA Asserted • 
(HOLD Asserted+ 
No Request) 



HOLD Negated • 
No Request 




Bus States: 

T1 — First clock of a non-pipelined bus cycle (Am386DX/DXL CPU drives new 
address and asserts ADS). 

T2 — Subsequent clocks of a bus cycle when NA has not been sampled asserted 
in the current bus cycle. 

T2I — Subsequent clocks of a bus cycle when NA has been sampled asserted in 
the current bus cycle but there is not yet an internal bus request pending 
(Am386DX/DXL CPU will not drive new address or assert ADS). 

T2P — Subsequent clocks of a bus cycle when NA has been sampled asserted in 
the current bus cycle and there is an internal bus request pending 
(Am386DX/DXL CPU drives new address and asserts ADS). 

T1 P — First clock of a pipelined bus cycle. 

Ti — Idle state. 

Th — Hold Acknowledge state (Am386DX/DXL CPU asserts HLDA). 

Asserting NA for pipelined address gives access to three more bus states: T2I, 

T2P,andT1P. 

Using pipelined address, the fastest bus cycle consists of T1 P and T2P. 



READY r 
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Figure 59. Am386DX/DXL Microprocessor Complete Bus States (Including Pipelined Address) 
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Pipelined Address With Dynamic Data Bus Sizing 



The BS16 feature allows easy interface to 16-bit data 
buses. When asserted, the Am386DX/DXL micropro- 
cessor bus interface hardware performs appropriate 
action to make the transfer using a 16-bit data bus 
connected on D15-D0. 

There is a degree of interaction, however, between the 
use of Address Pipelining and the use of Bus Size 1 6. 
The interaction results from the multiple bus cycles re- 
quired when transferring 32-bit operands over a 16-bit 
bus. If the operand requires both 16-bit halves of the 
32-bit bus, the appropriate Am386DX/DXL micropro- 
cessor action is a second bus cycle to complete the op- 
erand's transfer. This necessity conflicts with NA usage. 

When NA is sampled asserted, the Am386DX/DXL mi- 
croprocessor commits itself to perform the next inter- 
nally pending bus request, and is allowed to drive the 
next internally pending address onto the bus. Asserting 
NA therefore makes it impossible for the next bus cycle 
to again access the current address on A31-A2, such as 
may be required when BS16 is asserted by the external 
hardware. 

To avoid conflict, the Am386DX/DXL microprocessor is 

designed with following two provisions. 

1 . To avoid conflict, BS16 must be negated in the current 
bus cycle if NA has already been sampled asserted 
in the current cycle. If NA is sampled asserted, the 
current data bus size is assumed to be 32 bits. 



2. Also to avoid conflict, if NA and BS16 are both 
asserted during the same sampling window, BS16 
asserted has priority and the Am386DX/DXL micro- 
processor acts as if NA was negated at that time. 

Certain types of 1 6- or 8-bit operands require no adjust- 
ment for correct transfer on a 1 6-bit bus. Those are read 
or write operands using only the lower half of the data 
bus, and write operands using only the upper half 
of the bus, since the Am386DX/DXL CPU simultane- 
ously duplicates the write data on the lower half of the 
data bus. For th ese p atterns of Byte Enables and 
the W/R signals, BS16 need not be asserted at the 
Am386DX/DXL CPU allowing NA to be asserted during 
the bus cycle if desired. 

Interrupt Acknowledge (INTA) Cycles 

In response to an interrupt request on the INTR input 
when interrupts are enabled, the Am386DX/DXL micro- 
processor performs two interrupt acknowledge cycles. 
These bus cycles are similar to read cycles in that bus 
definition signals define the type of bus activity taking 
place, and each cycle continues until acknowledged by 
READY sampled asserted. 



The state of A2 distinguishes the first and second in- 
terrupt acknowledge cycles. The byte address driven 
during the first interrupt acknowledge cycle is 4 (A31- 
A3 Low, A2 High, BE3-BET High, and BEO Low). The 
address driven during the second interrupt acknowl- 
edge cycle is (A31-A2 Low, BE3-BET High, BEO 
Low). 



The LOCK output is asserted from the beginning of the 
first interrupt acknowledge cycle until the end of the sec- 
ond interrupt acknowledge cycle. Four idle bus states, 
Ti, are inserted by the Am386DX/DXL microprocessor 
between the two interrupt acknowledge cycles, allowing 
forcompatibility with spec TRHRLof the 8259A Interrupt 
Controller. 

During both interrupt acknowledge cycles, D31-D0 
float. No data is read at the end of the first interrupt ac- 
knowledge cycle. At the end of the second interrupt 
acknowledge cycle, the Am386DX/DXL microprocessor 
will read an external interrupt vector from D7-D0 of the 
data bus. The vector indicates the specific interrupt 
number (from 0-255) requiring service. 

Halt Indication Cycle 

The Am386DX/DXL microprocessor halts as a result of 
executing a HALT instruction. Signaling its entrance into 
the halt state, a halt indication cycle is performed. The 
halt indication cycle is identified by the state of the bus 
definition signals shown in Bus cycle Definition and a 
byte address of 2. BEO and BE2 are the only signals 
distinguishing halt indication from shutdown indication, 
that drives an address of 0. During the halt cycle 
undefined data is driven on D31-D0. The halt indication 
cycle must be acknowledged by READY asserted. 

A halted Am386DX/DXL CPU resumes execution when 
INTR (if interrupts are enabled) or NMI or RESET is 
asserted. 

Shutdown Indication Cycle 

The Am386DX/DXL microprocessor shuts down as a 
result of a protection fault while attempting to process a 
double fault. Signaling its entrance into the shutdown 
state, a shutdown indication cycle is performed. The 
shutdown indication cycle is identified by the state of the 
bus definition signals shown in Bus Cycle Definition and 
a byte address of 0. BEO and BE2 are the only signals 
distinguishing shutdown indication from halt indication, 
which drives an address of 2. During the shutdown 
cycle, undefined data is driven on D31-D0. The shut- 
down indication cycle must be acknowledged by 
READY asserted. 

A shutdown Am386DX/DXL microprocessor resumes 
execution when NMI or RESET is asserted. 
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Cycle 1 is pipelined. Cycle 1 A cannot be pipelined, but its address can be inferred from 
that of Cycle 1, to externally simulate address pipelining during Cycle 1A. 
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Figure 60. Using na and BS16 
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Interrupt Vector (0-255) is read on D7-D0 at end of second Interrupt Acknowledge bus cycle. 

Because each Interrupt Acknowledge bus cycle is followed by idle bus states, asserting NA has no practical effect. Choose the 

approach that is simplest for your system hardware design. 
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Figure 61. Interrupt Acknowledge Cycles 
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Figure 62. Halt Indication Cycle 
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Am386DX/DXL CPU re- 
sponds to HOLD input 
while in the Shutdown 
state. 



^ESS&S&S 



Note: Shutdown cycl e must 
be acknowledged by READY 
asserted. Wait states may be 
added to the cycle if desired. 



/ vai d2 XX^mSmm 



D31-D0 R In V / In 1 V / Undefined V- (Floating) 

^r ^y^t i 



Figure 63. Shutdown Indication Cycle 
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Other Functional Descriptions 
Entering and Exiting Hold Acknowledge 

The Bus Hold Acknowledge State, Th, is entered in 
response to the HOLD input being asserted. In the 
Bus Hold Acknowledge state, the Am386DX/DXL 
microprocessor floats all output or bidirectional signals, 
except for HLDA. HLDA is asserted as long as the 



Am386DX/DXL CPU remains in the bus hold acknowl- 
edge state. In the Bus Hold Acknowledge state, all in- 
puts except HOLD, FLT, RESET, BLJSY, ERROR, and 
PEREQ are ignored (also up to one rising edge on NMI 
is remembered for processing when HOLD is no longer 
asserted). 
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Note: For maximum design flexibility, the Am386DX/DXL CPU has no internal pullup resistors on its outputs. The design may 
require an external pullup on ADS and other Am386DX/DXL CPU outputs to keep them negated during float periods. 
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Figure 64. Requesting Hold from Idle Bus 
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Th may be entered from a bus idle state, as in Figure 64, 
or after the acknowledgment of the current physical bus 
cycle if the LOCK signal is not asserted, as in Figures 65 
and 66. If HOLD is asserted during a locked bus cycle, 
the Am386DX/DXL microprocessor may execute one 
unlocked bus cycle before acknowledging HOLD. If as- 
serting BS16 requires a second 1 6-bit bus cycle to com- 
plete a physical operand transfer, it is performed before 
HOLD is acknowledged, although the bus state dia- 
grams in Figures 53 and 59 do not indicate that detail. 

Th is exited in response to the HOLD input being ne- 
gated. The following state will be Ti as in Figure 64 if no 
bus request is pending. The following bus state will be 
T1 if a bus request is internally pending, as in Figures 65 
and 66. 

Th is also exited in response to RESET being asserted. 

If a rising edge occurs on the edge-triggered NMI in- 
put while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exited, 
unless of course, the Am386DX/DXL microprocessor is 
reset before Th is exited. 

RESET During HOLD Acknowledge 

RESET being asserted takes priority over HOLD being 
asserted. Therefore, Th is exited in response to the 
RESET input being asserted. If RESET is asserted 
while HOLD remains asserted, the Am386DX/DXL mi- 
croprocessor drives its pins to defined states during 
reset, as in Table 15 Pin State During RESET, and 
performs internal reset activity as usual. 

If HOLD remains asserted when RESET is negated, the 
Am386DX/DXL microprocessor enters the hold ac- 
knowledge state before performing its first bus cycle, 
provided HOLD is still asserted when the Am386DX/ 
DXL microprocessor would otherwise perform its first 
bus cycle. If HOLD remains asserted when RESET is 
negated, the BUSY input is still sampled as usual to de- 
termine whether a self test is being requested, and ER- 
ROR is still sampled as usual to determine whether a 
387DX math coprocessor versus an 80287 (or none) is 
present. 

Float 

Activating the FLT input floats all Am386DX/DXL CPU 
bidirectional and output signals, including HLDA. As- 
serting FLT isolates the Am386DX/DXL CPU from the 
surrounding circuitry. 

As the Am386DX/DXL microprocessor is packaged in a 
surface mount PQFP, it cannot be removed from the 
motherboard when In-Circuit Emulation (ICE) is 
needed. The FLT input allows the Am386DX/DXL CPU 
to be electrically isolated from the surrounding circuitry. 
This allows connection of an emulator to the Am386DX/ 
DXL microprocessor PQFP without removing it from the 
PCB. This method of emulation is referred to as ON- 
Circuit Emulation (ONCE). 



Entering and Exiting Float 

FLT is an asynchronous, active Low input. It is recog- 
nized on the rising edge of CLK2. When recognized, it 
aborts the current bus cycle and floats the outputs of the 
Am386DX/DXL microprocessor (Figure 68). FLT must 
be held Low for a minimum of 1 6-CLK2 cycles. Reset 
should be asserted and held asserted until after FLT is 
deasserted. This will ensure that the Am386DX/DXL 
CPU will exit Float in a valid state. 

Asserting the FLT input unconditionally aborts the cur- 
rent bus cycle and forces the Am386DX/DXL micro- 
processor into the Float mode. Since activating FLT 
unconditionally forces the Am386DX/DXL CPU into 
Float mode, the Am386DX/DXL CPU is not guaranteed 
to enter Float in a valid state. After deactivating FLT, the 
Am386DX/DXL CPU is not guaranteed to exit Float 
mode in a valid state. This is not a problem, as the FLT 
pin is meant to be used only during ONCE. After exiting 
Float, the Am386DX/DXL CPU must be reset to r eturn it 
to a valid state. Reset should be asserted before FLT is 
deasserted. This will ensure that the Am386DX/DXL 
CPU will exit Float in a valid state. 

FLT has an internal pull-up resistor, and if it is not used it 
should be unconnected. 

Bus Activity During and Following Reset 

RESET is the highest priority input signal capable of in- 
terrupting any processor activity when it is asserted. A 
bus cycle in progress can be aborted at any stage; or 
idle states or bus hold acknowledge states discontinued 
so that the RESET state is established. 

RESET should remain asserted for at least 15-CLK2 
periods to ensure it is recognized throughout the 
Am386DX/DXL microprocessor, and at least 80-CLK2 
periods if Am386DX/DXL device self-test is going to be 
requested at the falling edge. RESET asserted pulses 
less than 15 CLK2 periods may not be recognized. 
RESET pulses less than 80 CLK2 periods followed by 
a self-test may cause the self-test to report a failure 
when no true failure exists. 

The additional RESET pulse width is required to clear 
additional state prior to valid self-test. 

Provided the RESET falling edge meets setup and hold 
times, t25 and t26, the internal processor clock phase is 
defined at that time, as illustrated by Figure 67. 

An Am386DX/DXL microprocessor self-test may be re- 
quested at the time RESET is negated by having the 
BUSY input at a Low level, as shown in Figure 67. The 
self-test requires (2 20 ) + approximately 60-CLK2 periods 
to complete. The self-test duration is not affected by the 
test results. Even if the self-test indicates a problem, the 
Am386DX/DXL device attempts to proceed with the re- 
set sequence afterward. 
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After the RESET falling edge (and after the self-test if 
it was requested) the Am386DX/DXL microprocessor 
performs an internal initialization sequence for approxi- 
mately 350 to 450 CLK2 periods. 

The A m386DX/DXL microprocessor samples its ER- 
ROR input some time after the falling edge of RESET 
and before executing the first ESC instruction. During 



this sampling period BUSY must be High. If ERROR 
was sampled active, the Am386DX/DXL device em- 
ploys the 32-bit protocol of a 387DX math coprocessor. 
Even though this protocol was selected, it is still neces- 
sary to use a software recognition test to determine the 
presence or identity of the coprocessor and to assure 
compatibility with future processors. 
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Note: HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) requirements 
are met. This waveform is useful for determining Hold Acknowledge latency. 
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Figure 65. Requesting Hold from Active Bus (NA Negated) 
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Note: HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) requirements 
are met. This waveform is useful for determining Hold Acknowledge latency. 



Figure 66. Requesting Hold from Active Bus (na Asserted) 



15021 B-069 



Table 21. Component and Revision Identifier History 



Intel 

i386 

Stepping Name 


Am386DX/DXL 

Microprocessor 

Revision 


Component 
Identifier 


Revision 
Identifier 


D1 


D 


03 


08 



102 



Am386 Microprocessors for Personal Computers 



Reset 



[ 



sdsy [ XXX XXXXXXX) 



Reset 



> 15 CLK2 duration if not 
going to request self-test. 

> 80 CLK2 duration before 
requesting self-test. 



CLK 2 [ jiniiJirurijmjiiiiLru^ 

* Approximately 



|4>2|<M|02 
CLK (Internal) [ 3<^QOOdkXX3(37 

No self -test 



-«- 



ERROR 



r xxxxxxxx m xxxxxxxxxxxxxsx> xxx 



BE3-BE0.W/R r U v P Aa AA A A 

M/iO,HLDA [ XXXXXXXXkow 



Up to 30 CLK2 



A31-A2, 



D/C.LOCK [ XXXXXXX/ H i9h 
Upto30CLK2 — » 

^ [ xxxxxxxy l nigh 



READY 



031-do [ XXXXXXX) - 



Internal 
Initialization 



If self-test is performed, add 
60* to these numbers 



/ (2 2 °) + 



"V 




(Note*!) 



Low to begin self-test (Note 2) 



During Reset 



During Reset XXXXX) %XXX & XX X~^ 



During Reset 



na r xxxxxxxxx^ xxxxxxxxxxxxxxx> x^xx> sxmxxy 



*™ [ XXXXXXXXXX> Xl ftttXXXXXXXXXXXS mxx? KXXXXXSX 



[ xxxxxx>oo<x>:mxxxxxxx>o<xxx>:EEEEs:sEESEE 



(Floating) • 



Negated to allow sensing of a 
387DX math coprocessor 

W | || K&0&X 



17 18 



19 



395 



AMD 



Cycle 1 



n 



Non-Pipelined 
(Read) 



T1 



396 397 



T2 



398 



Asserted to indicate 387DX 
math coprocessor protocol 



XMm TxxmTxz 



SSS 



Valid 1 



V 



r 



Notes: 1 . BUSY should be held stable for 8-CLK2 periods before and after the CLK2 period in which RESET falling edge occurs. 

2. If self-test is requested, the Am386DX/DXL microprocessor outputs remain in their reset state as shown here and in Table 14. 



I I^UIC Ul . 






y iiuiii m 








15021B-070 


CLK2 £ P\J\f\f\T\ 


>- 


>-- 












FLT I \ 


1 








Control T X Valid >- 
Data T --<"">-< Valid 

Address V X Valid 


i 

< 


-< 


X 

X 
X 


Reset f 


_J 











Figure 68. Entering and Exiting FLT 
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Self-Test Signature 

Upon completion of self-test, (if self-test was requested 
by holding BUSY Low at least eight CLK2 periods before 
and after the falling edge of RESET), the EAX register 
will contain a signature of OOOOOOOOh indicating the 
Am386DX/DXL CPU passed its self-test of microcode 
and major PLA contents with no problems detected. The 
passing signature in EAX, OOOOOOOOh, applies to all 
Am386DX/DXL microprocessor revision levels. Any 
non-zero signature indicates the Am386DX/DXL CPU 
unit is faulty. 

Component and Revision Identifiers 

To assist Am386DX/DXL microprocessor users, the mi- 
croprocessor after reset holds a component identifier 
and a revision identifier in its DX register. The upper 8 
bits of DX hold 03h as identification of the Am386DX/ 
DXL CPU component. The lower 8 bits of DX hold an 
8-bit unsigned binary number related to the component 
revision level. The revision identifier begins chronologi- 
cally with a value zero and is subject to change (typically 
it will be incremented) with component steppings in- 
tended to have certain improvements or distinctions 
from previous steppings. 

These features are intended to assist Am386DX/DXL 
microprocessor users to a practical extent. However, 
the revision identifier value is not guaranteed to change 
with every stepping revision nor to follow a completely 
uniform numerical sequence, depending on the type or 
intention of revision or manufacturing materials required 
to be changed. 

Coprocessor Interfacing 

The Am386DX/DXL microprocessor provides an auto- 
matic interface for a 387DX floating-point math co- 
processor. A 387DX math coprocessor uses an l/O- 
mapped interface driven automatically by the 
Am386DX/DXL mi cropro c essor an d assisted by three 
dedicated signals: BUSY, ERROR, and PEREQ. 

As the Am386DX/DXL CPU be gins s upp orting a 
coprocessor instruction, it tests the BUSY and ERROR 
signals to determine if the coproc essor can accept its 
next instruction. Thus, the BUSY and ERROR inputs 
eliminate the need for any preamble bus cycles for com- 
munication between processor and coprocessor. A 
387DX math coprocessor can be given its command 
op-code immediately. The dedicated signals provide 
instruction synchronization, and eliminate the need of 
using the Am386DX/DXL CPU WAIT op-code (9Bh) for 
387DX math coprocessor instruction synchronization 
(the WAIT op-code was required when 8086 or 8088 
was used with the 8087 coprocessor). 



Custom coprocessors can be included in Am386DX/ 
DXL microprocessor based systems, via memory- 
mapped or l/O-mapped interfaces. Such coprocessor 
interfaces allow a completely custom protocol, and are 
not limited to a set of coprocessor protocol primitives. In- 
stead, memory-mapped or l/O-mapped interfaces may 
use all applicable Am386DX/DXL microprocessor in- 
stru ctions f or hi gh-speed coprocessor communication. 
The BUSY and ERROR inputs of the Am386DX/DXL 
CPU may also be used for the custom coprocessor in- 
terface, if such hardware assist is desired. These sig- 
nals can be tested by the Am386DX/DXL CPU WAIT op- 
code (9Bh). The WAIT instruction will wait until the 
BUSY input is negated (interruptable by an NMI or en- 
able INTR input), but generates an Exception 16 fault if 
the ERROR pin is in the asserted state when the BUSY 
goes (or is) negated. If the custom coprocessor inter- 
face is memory-mapped, protection of the addresses 
used for the interface can be provided with the 
Am386DX/DXL microprocessor on-chip paging or seg- 
mentation mechanisms. If the custom interface is l/O- 
mapped, protection of the interface can be provided with 
the Am386DX/DXL microprocessor IOPL (I/O Privilege 
Level) mechanism. 

A 387DX math coprocessor interface is I/O mapped as 
shown in Table 22. Note that a 387DX math coproces- 
sor interface addresses are beyond the OhFFFFh range 
for programmed I/O. When the Am386DX/DXL CPU 
supports a 387DX math coprocessor, the Am386DX/ 
DXL microprocessor automatically generates bus cy- 
cles to the coprocessor interface addresses. 

Table 22. Math Coprocessor Port Addresses 



Address in Am386DX/DXL 
CPU I/O Space 


387DX 
Coprocessor Register 


800000F8h 


Opcode Register 
(32-bit port) 


800000FCh 


Operand Register 
(32-bit port) 



To correctly map a 387DX math coprocessor registers 
to the appropriat e I/O a ddresses, connect a 387DX 
math coprocessor CMDO pin directly to the A2 output of 
the Am386DX/DXL microprocessor. 

Software Testing for Coprocessor Presence 

When software is used to test for coprocessor (387DX) 
presence, it should use only the following coprocessor 
op-codes: FINIT, FNINIT, FSTCW mem, FSTSW mem, 
FSTSW AX. To use other coprocessor op-codes when a 
coprocessor is known to be not present, first set EM = 1 
in Am386DX/DXL microprocessor CRO. 
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ABSOLUTE MAXIMUM RATINGS 

Storage Temperature -65°C to +150°C 

Ambient Temperature Under Bias . . -65°C to +125°C 
Supply Voltage with Respect 

toVss -0.5Vto+7V 

Voltage on Other Pins -0.5 V to Vcc +0.5 V 



Stresses above those listed under ABSOLUTE MAXIMUM 
RA TINGS may cause permanent device failure. Functionality 
at or above these limits is not implied. Exposure to Absolute 
Maximum Ratings for extended periods may affect device 
reliability. 



DC CHARACTERISTICS over COMMERCIAL operating ranges 

Vcc = 5 V ±5%; Tcase = 0°C to +85°C (PGA) 

Vcc = 5 V±10%; Tcase = 0°C to +100°C (PQFP— 20, 25, and 33 MHz) 

Vcc = 5 V±5%; Tcase = 0°C to +100°C (PQFP— 40 MHz) 



Symbol 


Parameter Description 


Notes 


Min 


Max 


Unit 


VlL 


Input Low Voltage 


(Notel) 


-0.3 


0.8 


V 


V.H 


Input High Voltage 




2.0 


Vcc + 0.3 


V 


V.LC 


CLK2 Input Low Voltage 


(Notel) 


-0.3 


0.8 


V 


VlHC 


CLK2 Input High Voltage 




2.7 


Vcc +0.3 


V 


Vol 


Output Low Voltage 

loL = 4mA:A31-A2, D31-D0 

Iol = 5 m A: BE3-BE0, W/R, 
D/C, M/iO, LOCK, ADS, HLDA 


(Note 6) 




0.45 
0.45 


V 
V 


Voh 


Output High Voltage 

l 0H = 1 mA: A31-A2, D31-D0 

Ioh = 0.9 mA: BE3-BE0, 
W/R, D/C, M/IO, LOCK, 
ADS, HLDA 


(Note 6) 


2.4 
2.4 




V 
V 


Ili 


Input Leakage Current 

(All pins except BS16, PEREQ, 

BUSY, FLT, and ERROR) 


0V<VlN<VcC 




±15 


uA 


I.H 


Input Leakage Current 
(PEREQ Pin) 


V,h = 2.4V 
(Note 2) 




200 


uA 


I.L 


Input Leakage Current 


V, L = 0.45 
(Note 3) 




-400 


uA 


(BS16, BUSY, FLT, and ERROR) 


Ilo 


Output Leakage Current 


0.45 V<Vout< Vcc 




±15 


"A 


Ice 


Supply Current 
CLK2 = 40MHz:with-20 
CLK2 = 50MHz:with-25 
CLK2 = 66MHz:with-33 
CLK2 = 80MHz:with-40 


(Note 7) Vcc = 5.0 V 
Ice Typ = 130 
Ice Typ = 1 60 
Ice Typ = 210 
Ice Typ = 330 




Vcc = 5.5 V 
155 
190 
245 
400 


mA 
mA 
mA 
mA 


IcCSB 


Standby Current 
(Am386DXL microprocessor) 


Iccsb Typ = 20 jliA 
(Note 5) 




150 


uA 


C|N 


Input or I/O Capacitance 


F c =1 MHz (Note 4) 




10 


PF 


CoUT 


Output Capacitance 


F c =1 MHz (Note 4) 




12 


PF 


CcLK 


CLK2 Capacitance 


F c = 1 MHz (Note 4) 




20 


PF 



Notes: 1 . The Min value, -0.3, is not 100% tested. 

2. PEREQ input has an in ternal pu lldown resistor. 

3. BS16, BUSY, FLT, and ERROR inputs each have an internal pullup resistor. 

4. Not 100% tested. 

5. Measurement taken with inputs at rails, outputs unloaded, BS16, BUSY, FLT, and ERROR at Vcc voltage level, PEREQ at Gnd. 

6. Outputs are CMOS and will pull to rail if load is not resistive. 

7. Inputs at rails (Vcc or Vss). 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating range— 40 MHz 

Vcc = 5 V ±5%; Tcase = 0°C to +85°C (PGA) 
Vcc = 5 V ±5%; Tcase = 0°C to +1 00°C (PQFP) 



No. 


Parameter Description 


Notes 


Ref Figure 


Min 


Max 


Unit 




Oper. Frequency: Am386DX CPU 
Am386DXL CPU 


Half CLK2 f req. 
Half CLK2 freq. 




2 



40 
40 


MHz 
MHz 


1 


CLK2 Period: Am386DX CPU 
Am386DXL CPU 




71 
71 


12.5 
12.5 


250 


ns 
ns 


2 


CLK2 High Time 


at Vihc 


71 


4 




ns 


3 


CLK2 Low Time 


at 0.8 V 


71 


5 




ns 


4 


CLK2 Fall Time 


2.7 V-0.8 V (Note 3) 


71 




4 


ns 


5 


CLK2 Rise Time 


0.8 V-2.7 V (Note 3) 


71 




4 


ns 


6 


A31-A2 Valid Delay 


C L = 50pF 


70, 73, 81 


4 


13 


ns 


7 


A31-A2 Float Delay 


(Notel) 


81 


4 


20 


ns 


8 




C L = 50pF 


70, 73, 81 


4 


13 


ns 


BE3-BE0, LOCK Valid Delay 


9 




(Notel) 


81 


4 


20 


ns 


BE3-BE0, LOCK Float Delay 


10 


W/R, M/TO, D/C Valid Delay 


C L = 50pF 


70, 73, 81 


4 


13 


ns 


10a 


ADS Valid Delay 


C L = 50pF 


70, 73, 81 


4 


13 


ns 


11 


W/R, M/TO, D/C, ADS Float Delay 


(Notel) 


81 


4 


20 


ns 


12 


D31-D0 Write Data Valid Delay 


C L = 50pF(Note4) 


70, 74, 81 


7 


18 


ns 


12a 


D31-D0 Write Data Hold Time 


C L = 50pF 


70,75 


2 




ns 


13 


D31-D0 Float Delay 


(Notel) 


81 


4 


17 


ns 


14 


HLDA Valid Delay 


C L = 50pF 


70,81 


4 


17 


ns 


14f 


HLDA Float Delay (PQFP Only) 


(Notel) 


70,81 


4 


17 


ns 


15 


NA Setup Time 




72 


5 




ns 


16 


NA Hold Time 




72 


2 




ns 


17 


BS16 Setup Time 




72 


5 




ns 


18 


BS16 Hold Time 




72 


2 




ns 


19 






72 


7 




ns 


READY Setup Time 


20 






72 


4 




ns 


READY Hold Time 


21 


D31-D0 Read Setup Time 




72 


4 




ns 


22 


D31-D0 Read Hold Time 




72 


3 




ns 


23 


HOLD Setup Time 




72 


4 




ns 


24 


HOLD Hold Time 




72 


2 




ns 


25 


RESET Setup Time 




82 


4 




ns 


26 


RESET Hold Time 




82 


2 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


72 


5 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


72 


5 




ns 


29 




(Note 2) 


72 


5 




ns 


PEREQ, ERROR, BUSY, 
FIT* Setup Time 


30 




(Note 2) 


72 


4 




ns 


PEREQ, ERROR, BUSY, 
FLT* Hold Time 



Notes: 1 . Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to assure 
recognition within a specific clock period. 

3. Rise and fall times are not tested. 

4. Min time not 100% tested. 
*PQFP package only. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating range— 33 MHz 

Vcc = 5 V +5%; Tcase = 0°C to +85°C (PGA) 
Vcc = 5 V ±1 0%; Tcase = 0°C to +1 00°C (PQFP) 



No. 


Parameter Description 


Notes 


Ref Figure 


Mln 


Max 


Unit 




Oper. Frequency: Am386DX CPU 
Am386DXL CPU 


Half CLK2 freq. 
HalfCLK2freq. 




2 



33.3 
33.3 


MHz 
MHz 


1 


CLK2 Period: Am386DX CPU 
Am386DXL CPU 




71 
71 


15 
15 


250 


ns 
ns 


2 


CLK2 High Time 


at Vihc 


71 


4 




ns 


3 


CLK2 Low Time 


at 0.8 V 


71 


5 




ns 


4 


CLK2 Fall Time 


2.7 V-0.8 V (Note 3) 


71 




4 


ns 


5 


CLK2 Rise Time 


0.8 V-2.7 V (Note 3) 


71 




4 


ns 


6 


A31-A2 Valid Delay 


C L = 50pF 


70, 73, 81 


4 


15 


ns 


7 


A31-A2 Float Delay 


(Notel) 


81 


4 


20 


ns 


8 




C L = 50pF 


70, 73, 81 


4 


15 


ns 


BE3-BE0, LOCK Valid Delay 


9 




(Notel) 


81 


4 


20 


ns 


BE3-BE0, LOCK Float Delay 


10 


W/R, M/TO, D/C Valid Delay 


C L = 50pF 


70, 73, 81 


4 


15 


ns 


10a 


ADS Valid Delay 


C L = 50pF 


70, 73, 81 


4 


14.5 


ns 


11 


W/R, M/TO, D/C, ADS Float Delay 


(Notel) 


81 


4 


20 


ns 


12 


D31-D0 Write Data Valid Delay 


C L = 50pF(Note4) 


70, 74, 81 


7 


23 


ns 


12a 


D31-D0 Write Data Hold Time 


C L = 50pF 


70,75 


2 




ns 


13 


D31-D0 Float Delay 


(Notel) 


81 


4 


17 


ns 


14 


HLDA Valid Delay 


C L = 50pF 


70,81 


4 


20 


ns 


14f 


HLDA Float Delay (PQFP Only) 


(Notel) 


70,81 


4 


20 


ns 


15 


NA Setup Time 




72 


5 




ns 


16 


NA Hold Time 




72 


2 




ns 


17 


BS16 Setup Time 




72 


5 




ns 


18 


BS16 Hold Time 




72 


2 




ns 


19 






72 


7 




ns 


READY Setup Time 


20 






72 


4 




ns 


READY Hold Time 


21 


D31-D0 Read Setup Time 




72 


5 




ns 


22 


D31-D0 Read Hold Time 




72 


3 




ns 


23 


HOLD Setup Time 




72 


9 




ns 


24 


HOLD Hold Time 




72 


2 




ns 


25 


RESET Setup Time 




82 


5 




ns 


26 


RESET Hold Time 




82 


2 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


72 


5 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


72 


5 




ns 


29 




(Note 2) 


72 


5 




ns 


PEREQ, ERROR, BUSY, 
FLT* Setup Time 


30 


PEREQ, ERROR, BUSY, 
FLT* Hold Time 


(Note 2) 


72 


4 




ns 



Notes: 1 . Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to assure 
recognition within a specific clock period. 

3. Rise and fall times are not tested. 

4. Min time not 100% tested. 
*PQFP package only. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating range— 25 MHz 

Vcc = 5 V ±5%; Tcase = 0°C to +85°C (PGA) 
Vcc = 5 V ±1 0%; Tcase = 0°C to +1 00°C (PQFP) 


No. 


Parameter Description 


Notes 


Ref Figure 


Mill 


Max 


Unit 




Oper. Frequency: Am386DX CPU 
Am386DXL CPU 


Half CLK2 freq. 
Half CLK2 freq. 




2 



25 
25 


MHz 
MHz 


1 


CLK2 Period: Am386DX CPU 
Am386DXL CPU 




71 
71 


20 
20 


250 


ns 
ns 


2 


CLK2 High Time 


at Vihc 


71 


4 




ns 


3 


CLK2 Low Time 


at 0.8 V 


71 


5 




ns 


4 


CLK2 Fall Time 


2.7 V-0.8 V (Note 3) 


71 




7 


ns 


5 


CLK2 Rise Time 


0.8 V-2.7 V (Note 3) 


71 




7 


ns 


6 


A31-A2 Valid Delay 


C L = 50pF 


70, 73, 81 


4 


17 


ns 


7 


A31-A2 Float Delay 


(Notel) 


81 


4 


30 


ns 


8 




C L = 50pF 


70, 73, 81 


4 


17 


ns 


BE3-BE0, LOCK Valid Delay 


9 




(Notel) 


81 


4 


30 


ns 


BE3-BE0, LOCK Float Delay 


10 


W/R, M/TO, D/C, ADS Valid Delay 


C L = 50pF 


70, 73, 81 


4 


17 


ns 


11 


W/R, M/IO, D/C, ADS Float Delay 


(Notel) 


81 


4 


30 


ns 


12 


D31-D0 Write Data Valid Delay 


C L = 50pF 


70, 74, 81 


7 


23 


ns 


12a 


D31-D0 Write Data Hold Time 


C L = 50pF 


70,75 


2 




ns 


13 


D31-D0 Float Delay 


(Notel) 


81 


4 


22 


ns 


14 


HLDA Valid Delay 


C L = 50pF 


70,81 


4 


22 


ns 


14f 


HLDA Float Delay (PQFP Only) 


(Notel) 


70,81 


4 


30 


ns 


15 


NA Setup Time 




72 


5 




ns 


16 


NA Hold Time 




72 


3 




ns 


17 


BS16 Setup Time 




72 


5 




ns 


18 


BS16 Hold Time 




72 


3 




ns 


19 






72 


9 




ns 


READY Setup Time 


20 






72 


4 




ns 


READY Hold Time 


21 


D31-D0 Read Setup Time 




72 


7 




ns 


22 


D31-D0 Read Hold Time 




72 


5 




ns 


23 


HOLD Setup Time 




72 


9 




ns 


24 


HOLD Hold Time 




72 


3 




ns 


25 


RESET Setup Time 




82 


8 




ns 


26 


RESET Hold Time 




82 


3 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


72 


6 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


72 


6 




ns 


29 


PtHEQ, ERROR, BUSY, FLT* 
Setup Time 


(Note 2) 


72 


6 




ns 


30 


PEREQ, ERROR, BUSY, FLT* 
Hold Time 


(Note 2) 


72 


5 




ns 



Notes: 1. Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to assure 
recognition within a specific clock period. 

3. Rise and fall times are not tested. 
*PQFP package only. 



108 



Am386 Microprocessors for Personal Computers 



AMD 



SWITCHING CHARACTERISTICS over COMMERCIAL operating range— 20 MHz 

Vcc = 5 V ±5%; Tcase = 0°C to +85°C (PGA) 
Vcc = 5 V ±1 0%; Tcase = 0°C to +1 00°C (PQFP) 


No. 


Parameter Description 


Notes 


Ref Figure 


Mln 


Max 


Unit 




Oper. Frequency: Am386DX CPU 
Am386DXL CPU 


Half CLK2 f req. 
HalfCLK2freq. 




2 



20 
20 


MHz 
MHz 


1 


CLK2 Period: Am386DX CPU 
Am386DXL CPU 




71 
71 


25 
25 


250 


ns 
ns 


2 


CLK2 High Time 


at Vihc 


71 


6 




ns 


3 


CLK2 Low Time 


at 0.8 V 


71 


6 




ns 


4 


CLK2 Fall Time 


2.7 V-0.8 V (Note 3) 


71 




8 


ns 


5 


CLK2 Rise Time 


0.8 V-2.7 V (Note 3) 


71 




8 


ns 


6 


A31-A2 Valid Delay 


C L =120pF 


70, 73, 81 


4 


30 


ns 


7 


A31-A2 Float Delay 


(Notel) 


81 


4 


32 


ns 


8 


BE3-BE0, LOCK Valid Delay 


C L = 75pF 


70, 73, 81 


4 


30 


ns 


9 


BE3-BE0, LOCK Float Delay 


(Notel) 


81 


4 


32 


ns 


10 


W/R, M/iO, D/C, ADS Valid Delay 


C L = 75pF 


70, 73, 81 


4 


28 


ns 


11 


W/R, M/IO, D/5, ADS Float Delay 


(Notel) 


81 


4 


30 


ns 


12 


D31-D0 Write Data Valid Delay 


C L = 120pF 


70, 74, 81 


4 


38 


ns 


13 


D31-D0 Float Delay 


(Notel) 


81 


4 


27 


ns 


14 


HLDA Valid Delay 


C L = 75pF 


70,81 


6 


28 


ns 


14f 


HLDA Float Delay (PQFP Only) 


(Notel) 


70,81 


4 


30 


ns 


15 


NA Setup Time 




72 


9 




ns 


16 


NA Hold Time 




72 


14 




ns 


17 


BS16 Setup Time 




72 


13 




ns 


18 


BS16 Hold Time 




72 


21 




ns 


19 


READY Setup Time 




72 


12 




ns 


20 


READY Hold Time 




72 


4 




ns 


21 


D31-D0 Read Setup Time 




72 


11 




ns 


22 


D31-D0 Read Hold Time 




72 


6 




ns 


23 


HOLD Setup Time 




72 


17 




ns 


24 


HOLD Hold Time 




72 


5 




ns 


25 


RESET Setup Time 




82 


12 




ns 


26 


RESET Hold Time 




82 


4 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


72 


16 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


72 


16 




ns 


29 


PEREQ, ERROR, BUSY, FLT* 
Setup Time 


(Note 2) 


72 


14 




ns 


30 


PEREQ, ERROR, BUSY, FLT* 
Hold Time 


(Note 2) 


72 


5 




ns 



Notes: 1 . Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to assure 
recognition within a specific clock period. 

3. Rise and fall times are not tested. 
*PQFP package only. 
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SWITCHING WAVEFORMS 

The switching characteristics consist of output delays, 
input setup requirements, and input hold requirements. 
All characteristics are relative to the CLK2 rising edge 
crossing the 2.0 V level. 

Switching characteristic measurement is defined by 
Figure 69. Inputs must be driven to the voltage levels in- 
dicated by this diagram. Am386DX/DXL CPU output de- 
lays are specified with minimum and maximum limits 
measured as shown. The minimum Am386DX/DXL 
microprocessor delay times are hold times provided to 
external circuitry. Am386DX/DXL microprocessor input 
setup and hold time are specified as minimums, defining 



the smallest acceptable sampling window. Within the 
sampling window, a synchronous input signal must 
be stable for correct Am386DX/DXL microprocessor 
operation. 

Outputs ADS, W/R, D/C, M/IO, LOCK, BE3-BE0, 
A31-A2, and HLDA only change at the beginning of 
phase one. D31-D0 (write cy cles) onl y chang e at the 
beginnin g of phase two. The READY, HOLD, BUSY, 
ERROR, PEREQ, FLT, and D31-D0 (read cycles) in- 
puts jjrejsampled at the beginning of phase one. The 
NA, BS16, INTR, and NMI inputs are sampled at the 
beginning of phase two. 



Tx 



CLK2 



[ 



<j>l (j)2 



«-(D-* 



<&- 



A31-A2 , 

L OCK , 

BE3-BE0, 



+-W+ Min Max 

ADS, D/C, |~~ " "^ •.-'• y 

M/TO, W/R, Output n 1 ' 5V 7^ ?^' 5V 

beo,hldaI : Z_^-___l^ , 



Valid 
Output n+1 



D31-D0 



NA, BS16, 
INTR, NMI 



R EADY, HOLD , 

FLT, ERROR, 

BUSY, PEREQ, 

D31-D0 



[ 



[ 



[ 



Valid 
Output r 



-<s>- 

Min 



«""Vsr-» Min Max 

n i.5^^'v % ;v';;>^6.5v 



-. r y Valid 
<; v Output n+1 



«— © » |« ©— » 

Note 



3.0V •r-^r?'^r^ ~;t 

V f<f<ff/\ ^^ 



3.0 V' 



0V- 



Note 



j$- BV S5 1 - BV ^ 



Legend: A— Maximum Output Delay Spec 
B— Minimum Output Delay Spec 
C — Minimum Input Setup Spec 
D — Minimum Input Hold Spec 



Note: Input waveforms have tr < 2.0 ns from 0.8 V to 2.0 V. 



15021 B-071 



Figure 69. Drive Levels and Measurement Points 
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Am386DX/DXL CPU Output O- 



V 



C L includes all parasitic capacitances. 



Figure 70. AC Test Load 



15021B-O72 



CLK2 



Vcc-0.8V 
2.0 V 
0.! 



t2 



LOV y 
.8 V/ 1 " 



z c 



t5 




t4 



Figure 71. CLK2 Timing 



15021 B-073 
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CLK2 



READY 



HOLD 



D31-D0 



BDSY 

ERROR 

PEREQ 

FLT 



NA 



BS16 



INTR, NMI 



Tx 



(J) 2 



Tx 






i 



t23 






t29 



K 



S 



t24 



i 



t22 



i 



t30 



i 



£ 



t15 



t 



t17 



i 



t27 



(|)2 






t16 



i 



t18 



i 



t28 



Figure 72. Input Setup and Hold Timing 



15021 B-074 



CLK2 



BE3 -BE0, 
LOCK 



W/R, M/TO, 
D/C, ADS 



A31-A2 



HLDA 



<l>2 



t8 — *— ► 



4>1 



Tx 



-y^^-V^^^T^T 



Valid n 



t10 t10a — * 



^K 



Min 



Valid 



— H — 

n A 



Valid n 



"V 



T 



Min 



<I>2 



<M 



Max 



Valid n+1 



w 



Max 



Valid n+1 



"jMax 



Valid n+1 



Figure 73. Output Valid Delay Timing 
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T1 



01 



CLK2 



W/R 



[ _^^^^^^A 



t12 



D31-D0 



^2 



Min 



Max, 



<2MK 



Valid n 



15021 B-076 



Figure 74. Write Data Valid Delay Timing (25, 33, and 40 MHz) 



CLK2 



W/R 



D31-D0 



[ 


T 
01 
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1 

t 


<l>2 

\ 


J v_ 


[ 


t12a 


w 


in 














[ 


Valid n 


\ 
/ 


mmm 













Figure 75. Write Data Hold Timing (25, 33, 40 MHz) 



15021 B-077 



CLK2 



W/R 



D31-D0 



[ 


J 
J 


01 

\ 


T 

; 


1 

i 


<t>2 

\ 


/ 


\ 


[ 


t1° 




Min 


Max 
















[ 




Valid n 




\ 




{ Valid n + 1 



















15021B-078 



Figure 76. Write Data Valid Delay Timing (20 MHz) 
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Output Valid Delay (ns) 



nom + b 


1 I 


1 


nom + 3 
nom 




— 






nom -3 




— 


nom -6 




— 


nom -9 


I I 


I 



50 75 100 125 150 

C L (picofarads) 



Note: This graph will not be linear outside of the Cl range shown. 



Figure 77. Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (Cl=120 pF) 



15021B-079 



Output Valid Delay (ns) 




nom -3 — 



nom -6 



75 100 125 150 

Cl (picofarads) 



Note: This graph will not be linear outside of the Cl range shown. 



15021B-080 



Figure 78. Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (Cl=75 pF) 
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Output Valid Delay (ns) 



nom + 9 — 



nom + 6 — 



nom + 3 — 



nom -3 — 




75 100 125 150 

Cl (picofarads) 



Note: This graph will not be linear outside of the Cl range shown. 



Figure 79. Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (G_=50 pF) 



15021 B-081 



Rise Time (ns) 0.8 V - 2.0 V 4 




50 75 100 125 150 

Cl (picofarads) 



Note: This graph will not be linear outside of the Cl range shown. 



15021B-082 



Figure 80. Typical Output Rise Time Versus Load Capacitance 
at Maximum Operating Temperature 
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CLK2 [ j 


4>2 




T 


h 


(1>2 




Ti or T1 


<i>2 








t9 




Min 




Max 
(High Z) 




Min 




Max 


BE3-BE0, |~ 
LOCK L 


















ti 1 












Max 








Min 




Max 
(High Z) 




Min 




W/R, M/io, r 
D/C, ADS L 






























Max 




t7 




Min 




Max 
(High Z) 




Min 




A31-A2 I 


















t14 t14f 










K 












t13 ■ 




Min 




A t12 

lax 




Min 


Max 


D31-D0 [ 










minh 7\ 










t13— Also 
eye 


applies to data float when write 
e is followed by read or idle 

t14 t14f - - 








_2 


Min 


Max 




Min 


Max 


15021B-083 


HLDA [ 


1 i 


i 


^WxA 




Figure 81.0 


utput Float De 


lay and HI 


_D 


A 


Valid Delay Timing 



CLK2 



RESET 




The second internal processor phase following RESET High-to-Low transition (provided t25 and t26 are met) is §2. 15021 B-084 



Figure 82. RESET Setup and Hold Timing and Internal Phase 
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INSTRUCTION SET 

This section describes the Am386DX/DXL micropro- 
cessor instruction set. A table lists all instructions along 
with instruction encoding diagrams and clock counts. 
Further details of the instruction encoding are then pro- 
vided in the following sections, which completely de- 
scribe the encoding structure and the definition of all 
fields occurring within Am386DX/DXL CPU instructions. 

Am386DX/DXL Microprocessor Instruc- 
tion Encoding and Clock Count Summary 

To calculate elapsed time for an instruction, multiply the 
instruction clock count, as listed in Table 23, by 
the processor clock period (e.g., 50 ns for a 20-MHz, 
40 ns for a 25-MHz, 30 ns for a 33-MHz, and 25 ns for a 
40-MHz Am386DX/DXL microprocessor). 

For more detailed information on the encodings of 
instructions refer to Section Instruction Encodings. Sec- 
tion Instruction Encodings explains the general struc- 
ture of instruction encodings and defines exactly the 
encodings of all fields contained within the instruction. 

Instruction Clock Count Assumptions 

1 . The instruction has been prefetched and decoded, 
and is ready for execution. 



AMD 



2. Bus cycles do not require wait states. 

3. There are no local bus HOLD requests delaying 
processor access to the bus. 

4. No Exceptions are detected during instruction 
execution. 

5. If an effective address is calculated, it does not use 
two general register components. One register, 
scaling, and displacement can be used within the 
clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count shown. 

Instruction Clock Count Notation 

1 . If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand. 

2. n = number of times repeated. 

3. m = number of components in the next instruction 
executed, where the entire displacement (if any) 
counts as one component; the entire immediate data 
(if any) counts as one component; and each of the 
other bytes of the instruction and prefix(es) each 
count as one component. 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary 



Instruction 


Format 








Clock Count 


Comments 




Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


GENERAL DATA TRANSFER 

MOV = Move: 

Register to Register/Memory 

Register/Memory to Register 

Immediate to Register/Memory 

Immediate to Register (short form) 

Memory to Accumulator (short form) 

Accumulator to Memory (short form) 

Register/Memory to Segment Register 

Segment Register to Register/Memory 

MOVSX = Move with Sign Extension 

Register from Register/Memory 

MOVZXsMove with Zero Extension 

Register from Register/Memory 

PUSH = Push: 

Register/Memory 

Register (short form) 

Segment Register (ES.CS.SS, or DS) 

Segment Register (FS or GS) 

Immediate 

PUSHA = Push All 

POP = Pop 

Register/Memory 

Register (short form) 

Segment Register (ES, SS, or DS) 

Segment Register (FS or GS) 

POPAsPopAM 

XCHG = Exchange 

Register/Memory with Register 

Register with Accumulator (short form) 

IN = Input from: 

Fixed Port 

Variable Port 

OUT = Output to: 

Fixed Port 

Variable Port 

LEA s Load EA to Register 








2/2 
2/4 
2/2 

2 

4 

2 

2/5 
2/2 

3/6 

3/6 

5 
2 
2 
2 
2 
18 

5 
4 

7 
7 
24 

3/5 
3 

12 
13 

10 
11 

2 


2/2 
2/4 
2/2 

2 

4 

2 

18,19 

2/2 

3/6 

3/6 

5 
2 
2 
2 
2 
18 

5 

4 
21 
21 
24 

3/5 
3 

6726** 
7727** 

4724** 

5725** 

2 


b 
b 
b 

b 
b 
b 
b 

b 

b 

b 
b 
b 
b 
b 
b 

b 
b 
b 
b 
b 

b,f 


h 
h 
h 

h 

h 

h,l,j 

h 

h 

h 

h 
h 
h 
h 
h 
h 

h 

h 
h,i,j 
h.i.j 

h 

f,h 

m 
m 

m 
m 


1 0001 oow 


mod reg r/m 


immediate data 


1 0001 01 w 


mod reg r/m 


1 1 0001 1 W 


mod r/m 


1 1 1 w reg 


immediate data 




1 01 OOOOw 


full displacement 


1 01 0001 w 


full displacement 




1 0001 1 1 


mod sreg3 r/m 




10001100 


mod reg r/m 










0001111 


1 1 1 1 1 1 w 


mod reg r/m 










00001111 


1 01 1 01 1 w 


mod reg r/m 












11111111 


mod 110 r/m 




10 10 reg 






sreg 2 110 


00001 1 1 1 


1 sreg 3 




01101 OsO 


immediate data 




01 1 00000 










10001111 


mod r/m 




10 11 reg 






sreg 2111 


00001 1 1 1 


1 sreg 3 1 




01 100001 








1 00001 1 w 


mod reg r/m 




10 10 reg 




Clock Count 




virtual 
8086 Mode 


1 1 1 001 Ow 


port number 


026 
027 

024 
025 


1 1 1 01 1 Ow 






1 1 1 001 1 w 


port number 


1 1 1 01 1 1 w 




1 0001 1 01 


mod reg r/m 













*lfCPL<IOPL **lfCPL>IOPL 

Clock count shown applies if I/O permission allows I/O to the port in Virtual 8086 Mode. If I/O bit map denies permission, Exception 13 fault occurs; refer to clock counts for INT 3 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (com 


tinued) 






Instruction 


Format 


Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


SEGMENT CONTROL 

LDSs Load pointer to DS 

LES= Load pointer to ES 

LFS = Load pointer to FS 

LGS = Load pointer to GS 

LSSs Load pointer to SS 

FLAG CONTROL 

CLC = Clear Carry Flag 

CLD = Clear Direction Flag 

CLI = Clear Interrupt Enable Flag 

CLTS= Clear Task Switched Flag 

CMC = Complement Carry Flag 

LAHF = Load AH into Flag 

POPF = Pop Flag 

PUSHF = Push Flag 

SAHF=Store AH into Flag 

STC=Set Carry Flag 

STD = Set Direction Flag 

STI = Set Interrupt Enable Flag 

ARITHMETIC 

ADDsAdd 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

ADC = Add with carry 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

INC sincrement 

Register/Memory 

Register (short form) 

SUB =Subtract 

Register from Register 

Register from Memory 

Memory from Register 






7 
7 

7 
7 
7 

2 
2 
8 
6 
2 
2 
5 
4 
3 
2 
2 
8 

2 
7 
6 

2/7 
2 

2 

7 
6 

2/7 
2 

2/6 
2 

2 
7 
6 


22 
22 
25 
25 
22 

2 
2 
8 
6 
2 
2 
5 
4 
3 
2 
2 
8 

2 

7 
6 

2/7 
2 

2 
7 
6 

2/7 
2 

2/6 
2 

2 
7 
6 


b 
b 
b 
b 
b 

c 

b 
b 

b 
b 
b 

b 
b 
b 

b 

b 
b 


h,l,J 
h.i.j 
h.i.j 
h, i,j 
h.i.j 

m 
i 

h.n 
h 

m 

h 
h 
h 

h 
h 
h 

h 

h 
h 


1 1 0001 01 


mod reg r/m 




1 1 0001 00 


mod reg r/m 






00001 1 1 1 


10110100 


mod reg r/m 




00001111 


10110101 


mod reg r/m 


00001111 


10110010 


mod reg r/m 








11111 000 




11111100 


11111010 






00001 1 1 1 


000001 1 




11110101 






10011111 




10011101 


1 001 1 1 00 


10011110 


11111001 


11111101 


11111011 








OOOOOOdw 


mod reg r/m 


immediate data 


OOOOOOOw 


mod reg r/m 


0000001 w 


mod reg r/m 


1 000 0s W 


mod r/m 


000001 0w 


immediate data 








0001 oodw 


mod reg r/m 


immediate data 


0001 000W 


mod reg r/m 


0001 001 w 


mod reg r/m 


1 00 0s W 


mod 10 r/m 


0001 01 0W 


immediate data 








1 1 1 1 1 1 1 w 


mod r/m 




10 reg 










001 01 odw 


mod reg r/m 




001 01 00W 


mod reg r/m 


001 01 01 w 


mod reg r/m 
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Table 23. Am386DX/DXL 


Microprocessor Instruction Set Summary (continued) 






Instruction 


Format 




Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 

Virtual 

Address 

Mode 


ARITHMETIC (continued) 

Immediate from Register/Memory 
Immediate from Accumulator 
(short form) 

SB B= Subtract with Borrow 

Register from Register 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator 

DEC = Decrement 

Register/Memory 

Register (short form) 

CMP = Compare 

Register with Register 

Memory with Register 

Register with Memory 

Immediate with Register/Memory 

Immediate with Accumulator(shortform) 

NEG = Change Sign 

AAA = ASCII Adjust for Add 

DAA s Decimal Adjust for Add 

AAS = ASCII Adjust for Subtract 

DAS a Decimal Adjust for Subtract 

MUL = Multiply (Unsigned) 

Accumulator with Register/Memory 

Multiplier -Byte 

-Word 

-Doubleword 
IMUL= Integer Multiply (signed) 

Accumulator with Register/Memory 

Multiplier -Byte 

-Word 

-Doubleword 
Register with Register/Memory 

Multiplier -Byte 

-Word 

-Doubleword 
Register/Memory with Immediate 
to Register 

-Word 

-Doubleword 






immediate data 


2/7 
2 

2 
7 
6 

2/7 
2 

2/6 
2 

2 
5 

6 
2/5 

2 
2/6 

4 

4 

4 

4 

12-17/15-20 
12-25/15-28 
12-41/15-44 

12-17/15-20 
12-25/15-28 
12-41/15-44 

12-17/15-20 
12-25/15-28 
12-41/15-44 

13-26/14-27 
13-42/14-43 


2/7 
2 

2 
7 
6 

2/7 
2 

2/6 
2 

2 

5 

6 
2/5 

2 
2/6 

4 

4 

4 

4 

12-17/15-20 
12-25/15-28 
12-41/15-44 

12-17/15-20 
12-25/15-28 
12-41/15-44 

12-17/15-20 
12-25/15-28 
12-41/15-44 

13-26/14-27 
13-42/14-43 


b 

b 
b 
b 

b 

b 
b 
b 

b 

b,d 
b,d 
b,d 

b,d 
b,d 
b,d 

b,d 
b,d 
b,d 

b,d 
b,d 


h 

h 
h 
h 

h 

h 
h 
h 

h 

d,h 
d,h 
d,h 

d,h 
d,h 
d,h 

d,h 
d,h 
d,h 

d,h 
d,h 


00 1 001 1 w 


mod 10 1 r/m 


000111 0w 


immediate data 




00011 Odw 


mod reg r/m 


immediate data 


0001 1 00W 


mod reg r/m 


0001 1 01 w 


mod reg r/m 


1 000 0s w 


mod 11 r/m 


000111 0W 


immediate data 






1 1 1 1 1 1 1 W 


reg 1 r/m 




10 1 reg 








00111 Odw 


mod reg r/m 


immediate data 


00111 OOw 


mod reg r/m 


001 1 1 01 w 


mod reg r/m 


1 000 0s w 


mod 111 r/m 


001 1 1 1 0W 


immediate data 




1 1 1 1 01 1 W 


mod 11 r/m 




00110111 






00111111 




00100111 


00101111 








1 1 1 1 01 1 w 


mod 10 r/m 










1 1 1 1 01 1 W 


mod 10 1 r/m 












00001 1 1 1 


10101111 


mod reg r/m 












01 1 01 0s1 


mod reg r/m 


immediate data 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 



Instruction 


Format 








Clock Count 


Comments 




Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 

Virtual 

Address 

Mode 


ARITHMETIC (continued) 

DIV= Divide (Unsigned) 

Accumulator by Register/Memory 
Divisor -Byte 

-Word 

-Doubleword 
IDIV= Integer Divide (Signed) 

Accumulator by Register/Memory 
Divisor -Byte 

-Word 

-Doubleword 
AAD = ASCII Adjust for Divide 

AAM = ASCII Adjust for Multiply 

CBW= Convert Byte to Word 

CWD= Convert Word to 
Double Word 

LOGIC 

Shift/Rotate Instructions 

Not Through Carry (ROL, ROR, SAL, 

Register/Memory by 1 
Register/Memory by CL 
Register Memory by Immediate Count 
Through Carry (RCL and RCR) 
Register/Memory by 1 
Register/Memory by CL 
Register/Memory by Immediate Count 

SHLD = Shift Left Double 

Register/Memory by Immediate 

Register/Memory by CL 

SHRDs Shift Right Double 

Register/Memory by Immediate 

Register/Memory by CL 

AND = And 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

TEST s And Function to Flags, no Re 

Register/Memory and Register 

Immediate Data and Register/Memory 

Immediate Data and Accumulator 
f?Mf9rrp) 








14/17 
22/25 
38/41 

19/22 

27/30 

43/46 

19 

17 

3 

2 

3/7 
3/7 
3/7 

9/10 
9/10 
9/10 

3/7 
3/7 

3/7 
3/7 

2 

7 
6 

2/7 
2 

2/5 
2/5 
2 


14/17 
22/25 
38/41 

19/22 

27/30 

43/46 

19 

17 

3 

2 

3/7 
3/7 
3/7 

9/10 
9/10 
9/10 

3/7 
3/7 

3/7 
3/7 

2 
7 
6 

2/7 
2 

2/5 
2/5 
2 


b,e 
b,e 
b,e 

b,e 
b,e 
b,e 

b 
b 
b 

b 
b 
b 

b 
b 
b 

b 
b 


e,h 
e.h 
e,h 

e,h 
e,h 
e.h 

h 
h 
h 

h 
h 
h 

h 
h 
h 

h 
h 


1 1 1 1 01 1 w 


mod 110 r/m 










11110112 


mod 111 r/m 










11010101 


00001010 




11010100 


00001 01 


10011000 






10011001 




SAR,SHL,andSH 


R) 




1101 O00W 


mod TTT r/m 


immediate 8-bit data 


1 1 01 001 w 


mod TTT r/m 


1 1 00000W 


mod TTT r/m 








1 1 01 ooow 


mod TTT r/m 


immediate 8-bit data 


1 1 01 001 W 


mod TTT r/m 


1 1 OOOOOw 


mod TTT r/m 


TTT 

000 
001 
01 
01 1 
1 00 
1 01 

1 1 1 


Instruction 

ROL 
ROR 
RCL 
RCR 
SHL/SAL 
SHR 
SAR 






00001 1 1 1 


10100100 


mod reg r/m 


immediate 8-bit data 


00001 1 1 1 


10100101 


mod reg r/m 








00001 1 1 1 


10101100 


mod reg r/m 


immediate 8-bit data 


00001 1 1 1 


10101101 


mod reg r/m 










001 OOOdw 


mod reg r/m 


immediate data 


001 0000W 


mod reg r/m 


001 0001 w 


mod reg r/m 


1 OOOOOOW 


mod 110 r/m 


001001 OW 


immediate data 




suit 


1 00001 Ow 


mod reg r/m 


immediate data 


1 1 1 1 01 1 W 


mod r/m 


10101 oow 


immediate data 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summa 


ry (continued) 






Instruction 


r ormat 




Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


LOGIC (continued) 
OR = Or 

Register to Register 

Register to Memory 

Memory to Register 

Immediate and Register/Memory 

Immediate to Accumulator (short form) 

XOR = Exclusive or 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

NOT s Invert Register/Memory 

STRING MANIPULATION 

CMPS = Compare Byte/Word 

INS a Input Byte/Wd from DX Port 

LODSs Load Byte/Wd to AL/AX 

MOVS = Move Byte/Word 

OUTS = Output Byte/Wd to DX Port 

SCAS = Scan Byte/Word 

STOS = Store Byte/Word from AL/AX/EX 

XLAT = Translate String 

REPEATED STRING MANIPULA 
REPE CMPSs Compare string 

(Find Non-Match) 
REPNE CMPSs Compare String 

(Find Match) 

REP INS = Input String 
REP LODSs Load String 
REP MOVSs Move String 
REP OUTS a Output String 

REPE SCASs Scan String 

(Find Non-AL/AX/EAX) 
REPNE SCAS s Store String 

(FindAL/AX/EAX) 

REP STOS s Store String 

BIT MANIPULATION 
BSFsScan Bit Forward 

BSRsScan Bit Reverse 








2 

7 
6 

2/7 
2 

2 

7 
6 

2/7 
2 

2/6 

10 
15 

5 

8 
14 

8 

5 

5 

5+9n 

5+9n 
14 + 6n 
5 + 6n 
8+4n 
12 + 5n 

5+8n 

5 + 8n 
5+5n 

11+3n 
9+3n 


2 
7 
6 

2/7 
2 

2 

7 
6 

2/7 
2 

2/6 

10 
9729** 

5 

8 
8728** 

8 

5 

5 

5+9n 

5+9n 

8+6n7 

28 + 6n** 

5 + 6n 

8 + 4n 

6 + 5n7 
26 + 5n** 

5 + 8n 

5 + 9n 
5+5n 

11+3n 
9+3n 


b 
b 
b 

b 
b 
b 

b 

b 
b 
b 
b 
b 
b 
b 

b 

b 
b 
b 
b 
b 

b 

b 
b 

b 
b 


h 
h 
h 

h 
h 
h 

h 

h 
h, m 

h 

h 
h,m 

h 

h 

h 

h 

h 
h,m 

h 

h 
h, m 

h 

h 
h 

h 
h 


00001 Odw 


mod reg r/m 


immediate data 


00001 00W 


mod reg r/m 


00001 01 w 


mod reg r/m 


1 000000W 


mod 1 r/m 


00001 1 0W 


immediate data 






001 1 OOdw 


mod reg r/m 


immediate data 


001 1 ooow 


mod reg r/m 


001 1 001 w 


mod reg r/m 


1 OOOOOOW 


mod 1 1 r/m 


001 1 01 OW 


immediate data 






1 1 1 1 01 1 w 


mod 1 r/m 








Clock Count 


1 01 001 1 w 




Virtual 8086 
Mode 


011011 0w 




029 


1 01 01 1 0w 






1 01 001 0W 


01 1 01 1 1 w 




028 


1 01 01 1 1 w 






1 01 01 01 w 




11010111 


TION Repeated 


by Count in CX or ECX 


1111 001 1 


1 01 001 1 w 


Clock Count 






11110010 


1 01 001 1 w 




Mode 


1111 001 


011011 ow 




028 + 6n 


1111 001 


1 01 01 1 0w 






1111 001 


1 01 001 0W 


1111 001 


01 1 01 1 1 w 




026 + 5n 










1111 001 1 


1 01 01 1 1 w 










1111 001 


1 01 01 1 1 w 




1111 001 


1 01 01 01 w 










00001 1 1 1 


10111100 


mod reg r/m 




00001 1 1 1 


10111101 


mod reg r/m 









Clock count shown applies if I/O permission allows I/O to the port in Virtual 8086 Mode. If I/O bit map denies 
permission, Exception 13 fault occurs; refer to clock counts for INT 3 instruction. 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 













Clock Count 


Comments 


Instruction Format 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 

Virtual 

Address 

Mode 


BIT MANIPULATION (continued) 
BT = Test Bit 




3/6 
3/12 

6/8 
6/13 

6/8 
6/13 

6/8 
6/13 

7 + m 

7 + m 
10 + m 

17+m 
22 + m 

7 + m 

7 + m 

7 + m 
10 + m 

12 + m 


3/6 
3/12 

6/8 
6/13 

6/8 
6/13 

6/8 
6/13 

7 + m 

7 + m 
10 + m 

34 + m 

52 + m 
86 + m 
94+4x+m 

273 

298 

218 

273 

300 

218 

38 + m 

56+ m 
90 + m 
9&+4x+m 

278 

303 

222 

278 

305 

222 

7 + m 

7 + m 

7 + m 
10 + m 

27 + m 


b 
b 

b 
b 

b 
b 

b 
b 

b 
b 

b 
b 

b 


h 
h 

h 
h 

h 
h 

h 
h 

r 
h,r 

J. k, r 

h,j,k,r 
h,j,k,r 
h,j,k,r 
h,j,k,r 
h,j,k,r 
h,j,k, r 
h,j,k,r 
h,j,k,r 
h,j,k,r 

h,j,k,r 

h.j.k.r 
h,j,k,r 
h,j,k, r 
h.j.k, r 
h,j,k,r 
h,j,k,r 
h,j,k,r 
h.j.k, r 
h,j, k,r 

r 
r 
h,r 

j.k.r 


Register/Memory, Immediate 
Register/Memory, Register 


00001 1 1 1 


10111010 


mod 10 r/m 


immediate 8-bit data 


00001111 


1 01 0001 1 


mod reg r/m 


BTC= Test Bit and Complement 






Register/Memory, Immediate 
Register/Memory, Register 


00001 1 1 1 


10111010 


mod 111 r/m 


immediate 8-bit data 


00001 1 1 1 


10111011 


mod reg r/m 


BTR = Test Bit and Reset 






Register/Memory, Immediate 
Register/Memory, Register 


00001 1 1 1 


10111010 


mod 110 r/m 


immediate 8-bit data 


1111 


10 110011 


mod reg r/m 


BTS = Test Bit and Set 






Register/Memory, Immediate 
Register/Memory, Register 


00001 1 1 1 


10111010 


mod 10 1 r/m 


immediate 8-bit data 


00001 1 1 1 


10101011 


mod reg r/m 


CONTROL TRANSFER 

CALL= Call 








Direct Within Segment 

Register/Memory 
Indirect Within Segment 


11101 000 


full displacement 




11111111 


mod 10 r/m 










Direct Intersegment 


10011010 


unsigned full offset, selector 


Protected Mode Only (Direct Intersegrr 
Via Call Gate to Same Privilege Lev 
Via Call Gate to Different Privilege L 
Via Call Gate to Different Privilege L 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386DX/DXL 
From 80286 Task to Virtual 8086 Ta 
From Am386DX/DXL CPU Task to 8 
From Am386DX/DXL CPU Task to A 
From Am386DX/DXL CPU Task to \ 


ent) 

5l 

evel, (No Paramete 
evel, (x Parameters 

CPU TSS 
sk (Am386DX/DXL 
0286 TSS 
m386DX/DXL CPU 
irtual 8086 Task (A 


rs) 

) 

CPU TSS) 

TSS 
m386DX/DXL CPU 


TSS) 


Indirect Intersegment 


11111111 


mod 11 r/m 




Protected Mode Only (Indirect Interseg 

Via Call Gate to Same Privilege Lev 
Via Call Gate to Different Privilege L 
Via Call Gate to Different Privilege L 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386DX/DXL 
From 80286 Task to Virtual 8086 Ta 
From Am386DX/DXL CPU Task to 8 
From Am386DX/DXL CPU Task to A 
From Am386DX/DXL CPU Task to V 

JMP s Unconditional Jump 


ment) 

3l 

evel (No Parameter 
evel (x Parameters] 

CPU TSS 
sk (Am386DX/DXL 
0286 TSS 
m386DX/DXL CPU 
irtual 8086 Task (A 


s) 

CPU TSS) 

TSS 
m386DX/DXL CPU 


TSS) 


Short 

Direct within Segment 

Register/Memory 
Indirect within Segment 


11101011 


8-bit displacement 


11101001 


full displacement 




11111111 


mod 10 r/m 










Direct Intersegment 


11101010 


unsigned full offset, selector 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 






Instruction Format 


Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


CONTROL TRANSFER (continued) 

Protected Mode Only (Direct Intersegment) 
Via Call Gate to Same Privilege Level 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386DX/DXL CPU TSS 
From 80286 Task to Virtual 8086 Task (Am386DX/DXL CPU TSS) 
From Am386DX/DXL CPU Task to 80286 TSS 
From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS 
From Am386DX/DXL CPU Task to Virtual 8086 Task (Am386DX/DXL CPU TSS) 


17 + m 

10 + m 
10 + m 

18 + m 
18 + m 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 


45 +m 
274 
301 
219 
270 
303 
221 

31 +m 

49+ m 
279 
306 
223 
275 
308 
225 

10 + m 
10 + m 
32 + m 
32 + m 

69 
69 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 


b 

b 
b 
b 
b 


h.j.k.r 
h.j.k.r 
h.j.k.r 
h.j.k.r 
h,j.k,r 
h.j.k.r 
h.j.k.r 

h.j.k.r 

h.j.k.r 
h.j.k.r 
h.j.k.r 
h.j.k.r 
h.j.k.r 
h.j.k, r 
h.j.k.r 

g, h,r 

g, h,r 

g,h,j,k,r 

g.h.j.k.r 

h.j.k.r 
h.j.k.r 

r 
r 

r 
r 

r 
r 

r 
r 

r 
r 

r 

r 

r 
r 


Indirect Intersegment 


11111111 


mod 10 1 r/m 




Protected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386DX/DXL CPU TSS 
From 80286 Task to Virtual 8086 Task (Am386DX/DXL C 
From Am386DX/DXL CPU Task to 80286 TSS 
From Am386DX/DXL CPU Task to Am386DX/DXL CPU 
From Am386DX/DXL CPU Task to Virtual 8086 Task (An 

RET= Return from CALL 


;pu tss) 

TSS 

1386DX/DXL CPU 1 


rss) 


Within Segment 

Within Seg. Adding Immediate to SP 

Intersegment 

Intersegment Adding Immediate to SP 


1 1 00001 1 


1 1 00001 


16-bit displacement 




1 1 001 01 1 






1 1 001 01 


16-bit displacement 




Protected Mode Only (RET) to Differen 
Intersegment 
Intersegment Adding Immediate to S 

CONDITIONAL JUMPS (Note: Tir 

JO = Jump on Overflow 


t Privilege Level 
nes are Jump "" 


taken or Not Tak 


cen") 


8 -bit Displacement 
Full Displacement 


01 1 1 0000 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 0000000 


JNO= Jump on Not Overflow 








8 -bit Displacement 
Full Displacement 


01 1 1 0001 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 0000001 


JB/JNAE= Jump on Below/Not Above 


i or Equal 






8 -bit Displacement 
Full Displacement 


01 1 1 001 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 000001 


JNB/JAE= Jump on Not Below/Abovf 


) or Equal 






8 -bit Displacement 
Full Displacement 


01 1 1 001 1 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 000001 1 


JE/JZ = Jump on Equal/ Zero 








8 -bit Displacement 
Full Displacement 


01110100 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 00001 00 


JNE/JNZ= Jump on Not Equal/Not Ze 


ro 






8 -bit Displacement 
Full Displacement 


01110 101 


8 -bit displacement 


full displacement 


00001111 


1 00001 01 


JBE/JNA= Jump on Below or Equal/I 1 


Jot Above 






8 -bit Displacement 
Full Displacement 


01110110 


8 -bit displacement 


full displacement 


00001 1 1 1 


1 00001 1 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 



Instruction 



Format 



Clock Count 



Real 

Address 

Mode 



Protected 
Virtual 
Address 



Comments 



Address 
Mode 



Protected 
Virtual 
Address 



CONDITIONAL JUMPS (continued) 
JNBE/JA= Jump on Not Below or Equal/Above 

8 -bit Displacement 

Full Displacement 

JSsJumponSign 

8 -bit Displacement 

Full Displacement 

JNS = Jump on Not Sign 

8 -bit Displacement 

Full Displacement 

JP/JPE = Jump on Parity/Parity Even 



01110111 


8 -bit displacement 


00001 1 1 1 


1 00001 1 1 



01111000 


8 -bit displacement 


00001111 


10001000 



01111001 


8 -bit displacement 


00001 1 1 1 


10001001 



01111010 



00001 1 1 1 



8 -bit displacement 



1 0001 01 



01111011 


8 -bit displacement 


00001111 


1 0001 01 1 



01111100 


8 -bit displacement 


00001 1 1 1 


1 0001 1 00 



01111101 


8 -bit displacement 


00001 1 1 1 


1 0001 1 01 



8 -bit Displacement 

Full Displacement 

JNP/JPO= Jump on Not Parity/Parity Odd 

8 -bit Displacement 

Full Displacement 

JL/JNGE= Jump on Less/Not Greater or Equal 

8 -bit Displacement 

Full Displacement 

JNL/JGE s Jump on Not Less/Greater or Equal 

8 -bit Displacement 

Full Displacement 

JLE/JNG= Jump on Less or Equal/Not Greater 

8 -bit Displacement 

Full Displacement 

JNLE/JG= Jump on Not Less or Equal/Greater 

8 -bit Displacement 

Full Displacement 

JCXZ= Jump on CX Zero * 

JECXZ= Jump on ECX Zero * 

LOOP = Loop CX Times 

LOOPZ/LOOPE = Loop with Zero/Equal 

LOOPNZ/LOOPNE=Loop while Not Zero 

CONDITIONAL BYTE SET (Note: Times are Register/Memory) 

SETOsSet Byte on Overflow 

To Register/Memory 

SETNO=Set Byte on Not Overflow 



01111110 


8 -bit displacement 


00001 1 1 1 


1 0001 1 1 



01111111 


8 -bit displacement 


00001 1 1 1 


1 0001 1 1 1 


1 1 1 0001 1 


8 -bit displacement 


1 1 1 0001 1 


8 -bit displacement 


1 1 1 0001 


8 -bit displacement 


1 1 1 00001 


8 -bit displacement 


1 1 1 00000 


8 -bit displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



00001 1 1 1 



1 001 0000 



mod r/m 



00001 1 1 1 



To Register/Memory 

SETB/SETNAE =Set Byte on Below/ Not Above or Equal 

To Register/Memory 



1 001 0001 



mod ooo r/m 



00001 1 1 1 



1 001 001 o 



mod r/m 



7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 
9+m or 5 
9+m or 5 
11 +m 
11 +m 
11 +m 



7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 
7+m or 3 

7+m or 3 

7+m or 3 

9+m or 5 

9+m or 5 

11+m 

11+m 

11 +m 



* Address Size Prefix Differentiates JCXZ from JECXZ. 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 






Instruction Format 


Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


CONDITIONAL BYTE SET (continued) 
SETNBsSet Byte on Not Below/Above or Equal 






4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 

4/5 

10 

12 

15+4(n-1) 

4 

37 
33 

35 
3 


4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 
4/5 

4/5 

10 

12 

15+4(n-1) 

4 
3 


b 
b 
b 

b 

b 
b 

b,e 
b,e 


h 
h 
h 
h 
h 
h 
h 
h 
h 
h 
h 
h 

h 

h 
h 
h 

h 


To Register/Memory 


00001 1 1 1 


10010011 


mod r/m 




SETE/SETZ = Set Byte on Equal/Zero 








To Register/Memory 


00001 1 1 1 


1 001 01 00 


mod r/m 




SETNE/SETNZ = Set Byte on Not Equal/Not Zero 






To Register/Memory 


00001 1 1 1 


10010101 


mod r/m 




SETBE/SETNA = Set Byte on Below or Equal/Not Above 






To Register/Memory 


00001111 


10010110 


mod r/m 




SETNBE/SETA = Set Byte on Not Bel 


ow or Equal/Above 






To Register/Memory 


00001111 


1 001 0111 


mod r/m 




SETS s Set Byte on Sign 








To Register/Memory 


00001111 


10011000 


mod r/m 




SETNS=Set Byte on Not Sign 








To Register/Memory 


00001111 


1 001 1 001 


mod r/m 




SETP/SETPE =Set Byte on Parity/Pa 


rity Even 






To Register/Memory 


00001 1 1 1 


10011010 


mod r/m 




SETNP/SETPO=Set Byte on Not Par 


ity/Parity Odd 






To Register/Memory 


00001 1 1 1 


10011011 


mod r/m 




SETL/SETNGE=sSet Byte on Less/N< 


>t Greater or Equal 






To Register/Memory 


00001 1 1 1 


1 001 1 1 00 


mod r/m 




SETNL/SETGE = Set Byte on Not Les 


^/Greater or Equal 






To Register/Memory 


00001 1 1 1 


01111101 


mod r/m 




SETLE/SETNG=Set Byte on Less or 


Equal/Not Greater 






To Register/Memory 


00001 1 1 1 


10011110 


mod r/m 




SETNLE/SETG = Set Byte on Not Les 


« or Equal/Greater 






To Register/Memory 
ENTER a Enter Procedure 


00001 1 1 1 


10011111 


mod r/m 




1 1 001 000 


16-bit displacement, 8-bit level 


L = 
L = 1 
L>1 










LEAVE s Leave Procedure 


1 1 001 001 






INTERRUPT INSTRUCTIONS 
INT = Interrupt: 






Type Specified 

Type 3 

INTO = Interrupt 4 if Overflow Hag Set 


1 1 001 1 01 


type 


1 1 001 1 00 




1 1 001 1 1 


If OF = 1 

lfOF = 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 











Clock Count 


Comments 






Protected 




Protected 




Real 


Virtual 


Real 


Virtual 




Address 


Address 


Address 


Address 


Instruction Format 


Mode 


Mode 


Mode 


Mode 


INTERRUPT INSTRUCTIONS (continued) 












Bound = Interrupt 5 if Detect 


01100010 


mod reg r/m 




Velue Out of Rsncie 
















If Out of Range 


44 




b,e 


e,g,h,j,k,r 


If in Range 


10 


10 


b,e 


o, g.h.j.k.r 


Protected Mode Only (INT) 










INT: Type Specified 










Via Interrupt or Trap Gate to Same Privilege Level 




59 




g,j,k,r 


Via Interrupt or Trap Gate to Different Privilege Level 




99 




g.j.k.r 


From 80286 Task to 80286 TSS via Task Gate 




282 




g.j.k.r 


From 80286 Task to Am386DX/DXL CPU TSS via Task Gate 




309 




g.j. k, r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




226 




9, j, k, r 


From Am386DX/DXL CPU Task to 80286 TSS via Task Gate 




284 




g,j,k,r 


From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS via Task Gate 




311 




g.j. k, r 


From Am386DX/DXL CPU Task to Virtual 8086 Mode via Task Gate 




228 




g.j.k.r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




289 




g.j. k, r 


From Virtual 8086 Mode to Am386DX/DXL CPU TSS via Task Gate 




316 




g.j. k. r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




119 




g.j. k. r 


INT: Type 3 










Via Interrupt or Trap Gate to Same Privilege Level 




59 




g.j.k.r 


Via Interrupt or Trap Gate to Different Privilege Level 




99 




g.j. k, r 


From 80286 Task to 80286 TSS via Task Gate 




278 




g.j. k, r 


From 80286 Task to Am386DX/DXL CPU TSS via Task Gate 




305 




g.j, k, r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




222 




g.j. k, r 


From Am386DX/DXL CPU Task to 80286 TSS via Task Gate 




280 




g.j. k,r 


From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS via Task Gate 




307 




g.j. k, r 


From Am386DX/DXL CPU Task to Virtual 8086 Mode via Task Gate 




224 




g.j, k, r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




285 




g.j, k, r 


From Virtual 8086 Mode to Am386DX/DXL CPU TSS via Task Gate 




312 




g.j.k.r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




119 




g, j, k, r 


INTO 










Via Interrupt or Trap Gate to Same Privilege Level 




59 




g.j, k, r 


Via Interrupt or Trap Gate to Different Privilege Level 




99 




g.j.k.r 


From 80286 Task to 80286 TSS via Task Gate 




280 




g.j.k.r 


From 80286 Task to Am386DX/DXL CPU TSS via Task Gate 




307 




g.j.k.r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




224 




g.j, k, r 


From Am386DX/DXL CPU Task to 80286 TSS via Task Gate 




282 




g.j.k.r 


From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS via Task Gate 




309 




g, j, k, r 


From Am386DX/DXL CPU Task to Virtual 8086 Mode via Task Gate 




225 




g.j. k, r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




287 




g.j. k, r 


From Virtual 8086 Mode to Am386DX/DXL CPU TSS via Task Gate 




314 




g.j, k. r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




119 




g.j.k.r 


BOUND 










Via Interrupt or Trap Gate to Same Privilege Level 




59 




g.j.k.r 


Via Interrupt or Trap Gate to Different Privilege Level 




99 




g.j, k, r 


From 80286 Task to 80286 TSS via Task Gate 




254 




g.j. k, r 


From 80286 Task to Am386DX/DXL CPU TSS via Task Gate 




284 




g.j.k.r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




231 




g.j.k.r 


From Am386DX/DXL CPU Task to 80286 TSS via Task Gate 




264 




g.j, k. r 


From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS via Task Gate 




294 




g, j, k, r 


From Am386DX/DXL CPU Task to Virtual 8086 Mode via Task Gate 




243 




g, j, k, r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




264 




g.j.k.r 


From Virtual 8086 Mode to Am386DX/DXL CPU TSS via Task Gate 




294 




g.j.k.r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




119 




g.j, k, r 


INTERRUPT RETURN 






22 






g.hj.k, r 


1 RET = Interrupt Return 


1 1 001 1 1 1 




Protected Mode Only (IRET) 






To the Same Privilege Level (within Task) 




38 




g, h, j, k, r 


To Different Privilege Level (within Task) 




82 




g, h, j, k, r 


From 80286 Task to 80286 TSS 




232 




h.j.k.r 


From 80286 Task to Am386DX/DXL CPU TSS 




265 




h.j.k.r 


From 80286 Task to Virtual 8086 Task 




213 




h.j.k.r 


From 80286 Task to Virtual 8086 Mode (within Task) 




60 






From Am386DX/DXL CPU Task to 80286 TSS 




271 




h,j.k,r 


From Am386DX/DXL CPU Task to Am386DX/DXL CPU TSS 


275 




h,j,k,r 




From Am386DX/DXL CPU Task to Virtual 8086 Task 


223 




h,j,k,r 




From Am386DX/DXL CPU Task to Virtual 8086 Mode (within Task) 




60 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 






Instruction Format 


Clock Count 


Comments 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


PROCESSOR CONTROL 






5 

1 1/4/5 
6 
22 
16 
14 
22 
12 
12 
3 
7 

3 












N/A 
N/A 

11 

11 
N/A 
11/14 


5 

1 1/4/5 

6 
22 
16 
14 
22 
12 
12 

3 

7 

3 












20/21 
15/16 

11 

11 
20/24 
11/14 


a 

a 

b,c 
b,c 

a 
b.c 


I 

h 
m 

h 
g.h.j.p 

h,l 

h,l 
g.h.j.l 

h,l 


HLT=HALT 


11110100 


MOV = Move to and From Control/Debug/Test Registers 




CR0/CR2/CR3 from register 

Register From CR3-0 

DR3-0 From Register 

DR7-6 From Register 

Register from DR7-6 

Register from DR3-0 

TR7-6 from Register 

Register from TR7-6 

NOP = No Operation 

WAIT = Wait until BUSY 
pin is negated 


00001 1 1 1 


001 0001 


1 1 eee reg 




00001 1 1 1 


001 00000 


1 1 eee reg 


00001 1 1 1 


0010001 1 


1 1 eee reg 


00001 1 1 1 


001 0001 1 


1 1 eee reg 


00001 1 1 1 


001 00001 


1 1 eee reg 


00001 1 1 1 


001 00001 


1 1 eee reg 


00001 1 1 1 


00100110 


1 1 eee reg 


00001 1 1 1 


001001 00 


1 1 eee reg 


1 001 0000 






1 001 1 01 1 






NOP s No Operation 


1 001 0000 


PROCESSOR EXTENSION INST 


RUCTIONS 






Processor Extension Escape 


11011 TTT 


mod LLL r/m 




PREFIX BYTES 


TTT and LLL bits 


are op-code information for coprocessor 


Address Size Prefix 
LOCK= Bus Lock Prefix 
Operand Size Prefix 


01100111 




1111 0000 


01100110 


Segment Override Prefix 




CS: 
DS: 
ES: 
FS: 
GS: 
SS: 


00101110 


00111110 


10 110 


011001 00 


01100101 


00110110 


PROTECTION CONTROL 
ARPL= Adjust Requested Privilege 1 


.evel 






From Register/Memory 


01 1 0001 1 


mod reg r/m 




LAR = Load Access Rights 










From Register/Memory 


00001 1 1 1 


0000001 


mod reg r/m 




LGDT= Load Global Descriptor 








Table Register 


00001 1 1 1 


00000001 


mod 10 r/m 




LIDT= Load Interrupt Descriptor 








Table Register 


00001 1 1 1 


00000001 


mod 11 r/m 




LLDT= Load Local Descriptor 








Table Register to Register/Memory 


00001 1 1 1 


00000000 


mod 10 r/m 




LMSW= Load Machine Status Word 








From Register/Memory 


00001 1 1 1 


00000001 


mod 110 r/m 
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Table 23. Am386DX/DXL Microprocessor Instruction Set Summary (continued) 



Instruction 


Format 








Clock Count 


Comments 




Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode 


Protected 
Virtual 

Address 
Mode 


PROTECTION CONTROL (contin 
LSL= Load Segment Limit 

From Register/Memory 

Byte-Granular Limit 

Page-Granular Limit 
LTR = Load Task Register 

From Register/Memory 

SGDT = Store Global Descriptor 

Table Register 

SIDT= Store Interrupt Descriptor 

Table Register 

SLDT = Store Local Descriptor Table 

To Register/Memory 

SMSW = Store Machine Status Word 

STR = Store Task Register 

To Register/Memory 

VERR = Verify Read Access 

Register/Memory 

VERW= Verify Write Access 


ued) 








N/A 
N/A 

N/A 

9 

9 

N/A 
2/2 

N/A 

N/A 
N/A 


21/22 
25/26 

23/27 

9 

9 

2/2 
2/2 

2/2 

10/11 
15/16 


a 
a 

a 

b,c 

b,c 

a 
b,c 

a 

a 
a 


g,h,j,p 
g,h,j,p 

g.h,j,i 

h 

h 

h 
h.l 

h 

g,h,j,p 
g.h.j.p 


00001111 


1 1 


mod reg r/m 












00001 1 1 1 


00000000 


mod 1 r/m 












00001111 


00000001 


mod r/m 












00001111 


00000001 


mod 1 r/m 




Register 








00001111 


00000000 


mod r/m 




00001111 


0000000 1 


mod 10 r/m 










00001111 


00000000 


mod 1 r/m 












00001 1 1 1 


00000000 


mod 10 r/m 




00001111 


00000000 


mod 10 1 r/m 











Instruction Notes for Table 23. 

Notes a through c apply to Am386DX/DXL CPU Real Address 
Mode only. 

a. This is a Protected Mode instruction. Attempted execution in Real 
Mode will result in Exception 6 (Invalid op-code). 

b. Exception 13 fault (General Protection) will occur in Real Mode if 
an operand reference is made that partially or fully extends beyond 
the maximum CS, DS, ES, FS, or GS limit, FFFFH. Exception 12 
(fault stack segment limit violation or not present) will occur in Real 
Mode if an operand reference is made that partially or fully extends 
beyond the maximum SS limit. 

c. This instruction may be executed in Real Mode. In Real Mode, its 
purpose is primarily to initialize the CPU for Protected Mode. 

Notes d through g apply to Am386DX/DXL CPU Real Address 
Mode and Am386DX/DXL CPU Protected Virtual Address Mode. 

d. The Am386DX/DXL CPU uses an early-out multiply algorithm. 
The actual number of clocks depends on the position of the most 
significant bit in the operand (multiplier). 

Clock counts given are minimum to maximum. To calculate actual 

clocks, use the following formula: 

Actual Clock = if m <> then max ([log2 |m|], 3) + b clocks: if m = 

then 3 + b clocks 

In this formula, m is the multiplier, and 

b = 9 for register to register, 

b = 1 2 for memory to register, 

b = 1 for register with immediate to register, 

b = 1 1 for memory with immediate to register. 

e. An Exception may occur, depending on the value of the operand. 

f. LOCK is automatically asserted, regardless of the presence or 
absence of the LOCK prefix. 

g. LOCK is asserted during descriptor table accesses. 



Notes h through r apply to Am386DX/DXL CPU Protected Virtual 
Address Mode only. 

h. Exception 13 fault (General Protection Violation) will occur if the 
memory operand in CS, DS, ES, FS, or GS cannot be used due to 
either a segment limit violation or access rights violation. If a stack 
limit is violated, an Exception 1 2 (Stack Segment Limit Violation or 
Not Present) occurs. 

i. For segment load operations, the CPL, RPL, and DPL must agree 
with the privilege rules to avoid an Exception 13 fault (General 
Protection Violation). The segment's descriptor must indicate 
present or Exception 1 1 (CS, DS, ES, FS, GS Not Present). If the 
SS register is loaded and a stack segment not present is detected, 
an Exception 12 (Stack Segment Limit Violation or Not Present) 
occurs. 

j. All segment descriptor accesses in t he GD T or LDT made by this 
instruction will automatically assert LOCK to maintain descriptor 
integrity in multiprocessor systems. 

k. JMP, CALL, INT, RET, and IRET instructions referring to another 
code segment will cause an Exception 13 (General Protection 
Violation) if an applicable privilege rule is violated. 

I. An Exception 1 3 fault occurs if CPL is greater than (0 is the most 
privileged level). 

m. An Exception 13 fault occurs if CPL is greater than IOPL 

n. The IF bit of the flag register is not updated if CPL is greater than 
IOPL. The IOPL and VM fields of the flag register are updated only 
ifCPL = 0. 

o. The PE bit of the MSW (CR0) cannot be reset by this instruction. 
Use MOV into CR0 if desiring to reset the PE bit. 

p. Any violation of privilege rules as applied to the selector operand 
does not cause a protection Exception; rather, the zero flag is 
cleared. 
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q. If the coprocessor's memory operand violates a segment limit or 
segment access rights, an Exception 13 fault (General Protection 
Exception) will occur before the ESC instruction is executed. An 
Exception 12 fault (Stack Segment Limit Violation or Not Present) 
will occur if the stack limit is violated by the operand's starting 
address. 

r. The destination of a JMP, CALL, INT, RET, or IRET must be in the 
defined limit of a code segment or an Exception 13 fault (General 
Protection Violation) will occur. 

Instruction Encoding 

Overview 

All instruction encodings are subsets of the general in- 
struction format shown in Figure 83. Instructions consist 
of one or two primary op-code bytes, possibly an ad- 
dress specifier consisting of the mod r/m byte and 
scaled index byte, a displacement if required, and an im- 
mediate data field if required. 

Within the primary op-code or op-codes, smaller encod- 
ing fields may be defined. These fields vary according to 
the class of operation. The fields define such informa- 
tion as direction of the operation, size of the displace- 
ments, register encoding, or sign extension. 

Almost all instructions referring to an operand in mem- 
ory have an addressing mode byte following the primary 
op-code byte(s). This byte, the mod r/m byte, specifies 
the address mode to be used. Certain encodings of the 
mod r/m byte indicate a second addressing byte, the 
scale-index-base byte, follows the mod r/m byte to fully 
specify the addressing mode. 

Addressing modes can include a displacement immedi- 
ately following the mod r/m byte, or scaled index byte. If 
a displacement is present, the possible sizes are 8, 1 6, 
or 32 bits. 

If the instruction specifies an immediate operand, the 
immediate operand follows any displacement bytes. 
The immediate operand, if specified, is always the last 
field of instruction. 

Figure 83 illustrates several of the fields that can appear 
in an instruction, such as the mod field and the r/m field, 
but the Figure does not show all fields. Several smaller 
fields also appear in certain instructions, sometimes 



within the op-code bytes themselves. Table 24 is a com- 
plete list of all fields appearing in the Am386DX/DXL mi- 
croprocessor instruction set. Further ahead, following 
Table 24, are detailed tables for each field. 

32-Bit Extensions of the Instruction Set 

With the Am386DX/DXL microprocessor, the 8086/ 
80186/80286 instruction set is extended in two ortho- 
gonal directions: 32-bit forms of all 16-bit instructions 
are added to support the 32-bit data types, and 32-bit 
addressing modes are made available for all instruc- 
tions referencing memory. This orthogonal instruction 
set extension is accomplished having a Default (D) bit in 
the code segment descriptor, and by having 2 prefixes 
to the instruction set. 

Whether the instruction defaults to operations of 1 6 or 
32 bits depends on the setting of the D bit in the code 
segment descriptor, which gives the default length 
(either 32 or 1 6 bits) for both operands and effective ad- 
dresses when executing that code segment. In the Real 
Address Mode or Virtual 8086 Mode, no code segment 
descriptors are used, but a D value of is assumed in- 
ternally by the Am386DX/DXL microprocessor when 
operating in those modes (for 16-bit default sizes com- 
patible with the 8086/80186/80286). 

Two prefixes, the Operand Size Prefix and the Effective 
Address Size Prefix, allow overriding individually the 
Default selection of operand size and effective address 
size. These prefixes may precede any op-code bytes 
and affect only the instruction they precede. If neces- 
sary, one or both of the prefixes may be placed before 
the op-code bytes. The presence of the Operand Size 
Prefix and the Effective Address Prefix will toggle the 
operand size or the effective address size, respectively, 
to the value opposite from the Default setting. For exam- 
ple, if the default operand size is for 32-bit data opera- 
tions, then presence of the Operand Size Prefix toggles 
the instruction to 16-bit data operation. As another 
example, if the default effective address size is 16 bits, 
presence of the Effective Address Size prefix 
toggles the instruction to use 32-bit effective address 
computations. 



TTTTTTTTTTTTTTTT 



7 



mod TTTf/m ss index base d32 1 1 6 1 8 | none data 32 1 16 | 8 | none 



765320 765320 
—A A A. 



opcode 

(one or two bytes) 

(T represents an opcode bit) 



mod r/m 
byte 



— v — 

s-i-b 

byte 



register and address 
mode specifier 



-J\*. 



address 
displacement 
-^ (4, 2, 1 bytes 
or none) 



immediate 

data 

(4, 2, 1 bytes 

or none) 



Figure 83. General Instruction Format 
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Table 24. Fields within Am386DX/DXL Microprocessor Instructions 



Field Name 


Description 


Number of Bits 


w 
d 
s 

reg 
mod r/m 


Specifies if Data is Byte or Full Size (Full Size is either 16 or 32 bits) 

Specifies Direction of Data Operation 

Specifies if an Immediate Data Field must be Sign-Extended 

General Register Specifier 

Address Mode Specifier (Effective Address can be a General Register) 


1 

1 

1 

3 
2 for mod; 
3 for r/m 


ss 


Scale Factor for Scaled Index Address Mode 


2 


index 
base 
sreg2 
sreg3 
tttn 


General Register to be used as Index Register 

General Register to be used as Base Register 

Segment Register Specifier for CS, SS, DS, ES 

Segment Register Specifier for CS, SS, DS, ES, FS, GS 

For Condition Instructions, specifies a Condition Asserted or a Condition Negated 


3 
3 
2 
3 
4 



Note: Table 23 shows encoding of individual instructions. 



These 32-bit extensions are available in all Am386DX/ 
DXL microprocessor modes, including the Real Ad- 
dress Mode or the Virtual 8086 Mode. In these modes 
the default is always 16 bits, so prefixes are needed to 
specify 32-bit operands or addresses. For instructions 
with more than one prefix, the order of prefixes is 
unimportant. 

Unless specified otherwise, instructions with 8- and 
1 6-bit operands do not affect the contents of the high- 
order bits of the extended registers. 

Encoding of Instruction Fields 

Within the instruction are several fields indicating regis- 
ter selection, addressing mode and so on. The exact en- 
codings of these fields are defined immediately ahead. 

Encoding of Operand Length (w) Field 

For any given instruction performing a data operation, 
the instruction is executing as a 32- or 16-bit operation. 
Within the constraints of the operation size, the w field 
encodes the operand size as either one byte or the full 
operation size, as shown in the table below. 



w Field 


Operand Size 

During 16-Bit 

Data Operations 


Operand Size 

During 32-Bit 

Data Operations 



1 


8 Bits 
16 Bits 


8 Bits 
32 Bits 



Encoding of The General Register (reg) Field 

The general register is specified by the reg field, which 
may appear in the primary op-code bytes, or as the reg 
field of the mod r/m byte, or as the r/m field of the mod 
r/m byte. 



Encoding of reg Field When w Field 
is not Present in Instruction 



reg Field 


Register Selected 

During 16-Bit 
Data Operations 


Register Selected 

During 32-Bit 
Data Operations 


000 


AX 


EAX 


001 


CX 


ECX 


010 


DX 


EDX 


011 


BX 


EBX 


100 


SP 


ESP 


101 


BP 


EBP 


110 


SI 


ESI 


111 


Dl 


EDI 



Encoding of reg Field When w Field 
is Present in Instruction 



Register Specified by reg Field 
During 16-Bit Data Operations 


reg 


Function of w Field 


(when w = 0) 


(when w= 1) 


000 


AL 


AX 


001 


CL 


CX 


010 


DL 


DX 


011 


BL 


BX 


100 


AH 


SP 


101 


CH 


BP 


110 


DH 


SI 


111 


BH 


Dl 
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Register Specified by reg Field 
During 32-Bit Data Operations 


reg 


Function of w Field 


(when w = 0) 


(when w = 1) 


000 


AL 


EAX 


001 


CL 


ECX 


010 


DL 


EDX 


011 


BL 


EBX 


100 


AH 


ESP 


101 


CH 


EBP 


110 


DH 


ESI 


111 


BH 


EDI 



Encoding of The Segment Register (sreg) Field 
The sreg field in certain instructions is a 2-bit field allow- 
ing one of the four 80286 segment registers to be speci- 
fied. The sreg field in other instructions is a 3-bit field, al- 
lowing the Am386DX/DXL microprocessor FS and GS 
segment registers to be specified. 

2-Bit sreg2 Field 



2-Bit sreg 2 Field 


Segment Register Selected 


00 
01 
10 

11 


ES 
CS 
SS 
DS 



3-Bit sreg3 Field 



3-Bit sreg3 Field 


Segment Register Selected 


000 


ES 


001 


CS 


010 


SS 


011 


DS 


100 


FS 


101 


GS 


110 


do not use 


111 


do not use 



Encoding of Address Mode 

Except for special instructions, such as PUSH or POP, 
where the addressing mode is pre-determined, the ad- 
dressing mode for the current instruction is specified by 
addressing bytes following the primary op-code. The 
primary addressing byte is the mod r/m byte, and a sec- 
ond byte of addressing information, the scale-index- 
base (s-i-b) byte, can be specified. 

The s-i-b byte is specified when using 32-bit addressing 
mode and the mod r/m byte has r/m = 1 00 and mod = 00, 
01 , or 1 0. When the s-i-b byte is present, the 32-bit ad- 
dressing mode is a function of the mod, ss, index, and 
base fields. 

The primary addressing byte, the mod r/m byte, also 
contains three bits (shown as TTT in Figure 83) some- 
times used as an extension of the primary op-code. The 
three bits, however, may also be used as a register 
field (reg). 

When calculating an effective address, either 16-bit ad- 
dressing or 32-bit addressing is used. 1 6-bit addressing 
uses 1 6-bit address components to calculate the effec- 
tive address while 32-bit addressing uses 32-bit ad- 
dress components to calculate the effective address. 
When 1 6-bit addressing is used, the mod r/m byte is in- 
terpreted as a 16-bit addressing mode specifier. When 
32-bit addressing is used, the mod r/m byte is inter- 
preted as a 32-bit addressing mode specifier. 

Tables on the following pages define all encodings of all 
16- and 32-bit addressing modes. 
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Encoding of 16-Bit Address Mode with mod r/m Byte 



mod r/m 


Effective Address 


00 000 


DS:[BX + SI] 


00 001 


DS:[BX + Dl] 


00 010 


SS:[BP + SI] 


00 011 


DS:[BP + Dl] 


00 100 


DS:[SI] 


00 101 


DS:[DI] 


00 110 


DS:d16 


00 111 


DS:[BX] 


01 000 


DS:[BX + SI + d8] 


01 001 


DS:[BX + DI + d8] 


01 010 


SS:[BP + SI + d8] 


01 011 


SS:[BP + Dl + d8] 


01 100 


DS:[SI + d8] 


01 101 


DS:[DI + d8] 


01 110 


SS:[BP + d8] 


01 111 


DS:[BX + d8] 



mod r/m 


Effective Address 


10 000 


DS:[BX + SI + d16] 


10 001 


DS:[BX+DI + d16] 


10 010 


SS:[BP + SI + d16] 


10 011 


SS:[BP + DI + d16] 


10 100 


DS:[SI + d16] 


10 101 


DS:[DI + d16] 


10 110 


SS:[BP + d16] 


10 111 


DS:[BX + d16] 


11 000 


Register— See Below 


11 001 


Register — See Below 


11 010 


Register— See Below 


11 011 


Register— See Below 


11 100 


Register— See Below 


11 101 


Register — See Below 


11 110 


Register — See Below 


11 111 


Register— See Below 





Register Specified by r/m 


During 32-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when wr 1) 


11 000 


AL 


EAX 


11 001 


CL 


ECX 


11 010 


DL 


EDX 


11 011 


BL 


EBX 


11 100 


AH 


ESP 


11 101 


CH 


EBP 


11 110 


DH 


ESI 


11 111 


BH 


EDI 



Register Specified by r/m 
During 16-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w = 1) 


11 000 


AL 


AX 


11 001 


CL 


CX 


11 010 


DL 


DX 


11 011 


BL 


BX 


11 100 


AH 


SP 


11 101 


CH 


BP 


11 110 


DH 


SI 


11 111 


BH 


Dl 
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Encoding of 32-Bit Address Mode with mod r/m byte 
(No s-i-b Byte Present) 



mod r/m 


Effective Address 


00 000 


DS:[EAX] 


00 001 


DS:[ECX] 


00 010 


DS:[EDX] 


00 011 


DS:[EBX] 


00 100 


s-i-b is present 


00 101 


DS:d32 


00 110 


DS:[ESI] 


00 111 


DS:[EDI] 


01 000 


DS:[EAX + d8] 


01 001 


DS:[ECX + d8] 


01 010 


DS:[EDX + d8] 


01 011 


DS:[EBX + d8] 


01 100 


s-i-b is present 


01 101 


SS:[EBP + d8] 


01 110 


DS:[ESI + d8] 


01 111 


DS:[EDI + d8] 



mod r/m 


Effective Address 


10 


000 


DS:[EAX + d32] 


10 


001 


DS:[ECX + d32] 


10 


010 


DS:[EDX + d32] 


10 


011 


DS:[EBX + d32] 


10 


100 


s-i-b is present 


10 


101 


SS:[EBP + d32] 


10 


110 


DS:[ESi + d32] 


10 


111 


DS:[EDI + d32] 


11 


000 


Register — See Below 


11 


001 


Register — See Below 


11 


010 


Register — See Below 


11 


011 


Register— See Below 


11 


100 


Register — See Below 


11 


101 


Register— See Below 


11 


110 


Register — See Below 


11 


111 


Register — See Below 



Register Specified by reg or r/m 
During 32-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w= 1) 


11 000 


AL 


EAX 


11 001 


CL 


ECX 


11 010 


DL 


EDX 


11 011 


BL 


EBX 


11 100 


AH 


ESP 


11 101 


CH 


EBP 


11 110 


DH 


ESI 


11 111 


BH 


EDI 



Register Specified by reg or r/m 


During 16-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w = 1) 


11 000 


AL 


AX 


11 001 


CL 


CX 


11 010 


DL 


DX 


11 011 


BL 


BX 


11 100 


AH 


SP 


11 101 


CH 


BP 


11 110 


DH 


SI 


11 111 


BH 


Dl 
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Encoding of 32-Bit Address Mode (mod r/m Byte and s-i-b present) 



mod base 


Effective Address 


00 000 
00 001 
00 010 
00 011 
00 100 
00 101 
00 110 

00 111 

01 000 
01 001 
01 010 
01 011 
01 100 
01 101 
01 110 
01 111 

10 000 
10 001 
10 010 
10 011 
10 100 
10 101 
10 110 
10 111 


DS:[EAX + (scaled index)] 
DS:[ECX + (scaled index)] 
DS:[EDX + (scaled index)] 
DS:[EBX + (scaled index)] 
SS:[ESP + (scaled index)] 
DS:[d32 + (scaled index)] 
DS:[ESI + (scaled index)] 
DS:[EDI + (scaled index)] 

DS:[EAX + (scaled index) + d8] 
DS:[ECX + (scaled index) + d8] 
DS:[EDX + (scaled index) + d8] 
DS:[EBX + (scaled index) + d8] 
SS:[ESP + (scaled index) + d8] 
SS:[EBP + (scaled index) + d8] 
DS:[ESI + (scaled index) + d8] 
DS:[EDI + (scaled index) + d8] 

DS:[EAX + (scaled index) + d32] 
DS:[ECX + (scaled index) + d32] 
DS:[EDX + (scaled index) + d32] 
DS:[EBX + (scaled index) + d32] 
SS:[ESP + (scaled index) + d32] 
SS:[EBP + (scaled index) + d32] 
DS:[ESI + (scaled index) + d32] 
DS:[EDI + (scaled index) + d32] 



ss 


Scale Factor 


00 
01 
10 

11 


x1 
x2 
x4 
x8 



Index 


Index Register 


000 


EAX 


001 


ECX 


010 


EDX 


011 


EBX 


100 


no index reg (see note) 


101 


EBP 


110 


ESI 


111 


EDI 



Note: When index field is 100, indicating no index register, then ss field 
must equal 00. If index is 100 and ss does not equal 00, the effective 
address is undefined. 



Note: Mod field in mod r/m byte; ss, index, base fields in s-i-b byte. 



Encoding of Operation Direction (d) Field 

In many two-operand instructions the d field is present 
to indicate which operand is considered the source and 
which is the destination. 



d 


Direction of Operation 





Register/Memory «— Register 
reg Field indicates Source Operand; 
mod r/m or mod ss index base indicates 
Destination Operand. 


1 


Register <— Register Memory 

reg Field indicates Destination Operand; 

mod r/m or mod ss index base indicates Source 

Operand. 



Encoding of Sign-Extend (s) Field 

The s field occurs primarily to instructions with immedi- 
ate data fields. The s field has an effect only if the size of 
the immediate data is 8 bits and is being placed in a 1 6- 
or 32-bit destination. 



s 


Effect on 
Immediate Data 8 


Effect on 
Immediate Data 16|32 





None 


None 


1 


Sign-Extended Data 8 to fill 
16-Bit or 32-Bit Destination 


None 
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Encoding of Conditional Test (tttn) Field 

For the conditional instructions (conditional jumps and 
set on condition), tttn is encoded with n indicating to use 
the condition (n=0) or its negation (n=1), and ttt giving 
the condition to test. 



Mnemonic 


Condition 


tttn 





Overflow 


0000 


NO 


No Overflow 


0001 


B/NAE 


Below/Not Above or Equal 


0010 


NB/AE 


Not Below/Above or Equal 


0011 


E/Z 


Equal/Zero 


0100 


NE/NZ 


Not Equal/Not Zero 


0101 


BE/NA 


Below or Equal/Not Above 


0110 


NBE/A 


Not Below or Equal/Above 


0111 


S 


Sign 


1000 


NS 


Not Sign 


1001 


P/PE 


Parity/Parity Even 


1010 


NP/PO 


Not Parity/Parity Odd 


1011 


L/NGE 


Less Than/Not Greater or Equal 


1100 


NL/GE 


Not Less Than/Greater or Equal 


1101 


LE/NG 


Less Than or Equal/Not Greater Than 


1110 


NLE/G 


Not Less Than or Equal/Greater Than 


1111 



Encoding of Control or Debug or Test Register 
(eee) Field 

For the loading and storing of the Control, Debug and 
Test registers. 

When Interpreted as Control Register Field 



eee Code 


Reg Name 


000 
010 
011 


CR0 
CR2 
CR3 


Do not use any other encoding. 



When Interpreted as Debug Register Field 



eee Code 


Reg Name 


000 


DR0 


001 


DR1 


010 


DR2 


011 


DR3 


110 


DR6 


111 


DR7 


Do not use any other encoding. 



When Interpreted as Test Register Field 



eee Code 


Reg Name 


110 
111 


TR6 
TR7 


Do not use any other encoding. 
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MECHANICAL DATA 

Introduction 

In this section, the physical packaging and its connec- 
tions are described in detail. 

Package Dimensions and Mounting 

The initial Am386DX/DXL microprocessor package is a 
132-pin ceramic pin grid array (PGA). Pins of this pack- 
age are arranged 0.100 inch (2.54 mm) center-to- 
center, in a 14 x 14 matrix, three rows around. 

A wide variety of available sockets allow low insertion 
force or zero insertion force mountings, and a choice of 
terminals such as soldertail, surface mount, or wire 
wrap. 

Package Thermal Specification 

The Am386DX/DXL microprocessor is specified for 
operation when ambient temperature is within the range 
of 0°C-100°C. The ambient temperature may be meas- 
ured in any environment, to determine whether the 
Am386DX/DXL microprocessor is within specified oper- 
ating range. 

The PGA ambient temperature should be measured at 
the center of the top surface opposite the pins. 

ELECTRICAL DATA 

Introduction 

The following sections describe recommended electri- 
cal connections for the Am386DX/DXL microprocessor 
and its electrical specifications. 

Power and Grounding 
Power Connections 

The Am386DX/DXL CPU is implemented in CS21S 
technology and has modest power requirements. How- 
ever, its high clock frequency and 72 output buffers (ad- 
dress, data, control, and HLDA) can cause power 
surges as multiple output buffers drive new signal levels 
simultaneously. For clean on-chip power distribution at 
high frequency, 20 Vcc and 21 Vss pins separately feed 
functional units of the Am386DX/DXL CPU. 

Power and ground connections must be made to all 
external Vcc and GND pins of the Am386DX/DXL CPU. 
On the circuit board, all Vcc pins must be connected on a 
Vcc plane. All Vss pins must be likewise connected to the 
GND plane. 



Power Decoupling Recommendations 

Liberal decoupling capacitance should be placed near 
the Am386DX/DXL CPU. The Am386DX/DXL micro- 
processor driving its 32-bit parallel address and data 
buses at high frequencies can cause transient power 
surges, particularly when driving large capacitive loads. 

Low inductance capacitors and interconnects are rec- 
ommended for best high frequency electrical perform- 
ance. Inductance can be reduced by shortening circuit 
board traces between the Am386DX/DXL microproces- 
sor and decoupling capacitors as much as possible. Ca- 
pacitors specifically for PGA packages are also com- 
mercially available, for the lowest possible inductance. 

Resistor Recommendations 



The ERROR, FLT, and BUSY inputs have resistor 
pull-ups of approximately 20 Kohms built into the 
Am386DX/DXL CPU to keep these signals negated 
when no 387DX math coprocessor is present in the sys- 
tem (or temporarily removed from its socket). TheBS16 
input also has an internal pull-up resistor of approxi- 
mately 20 Kohms, and the PEREQ input has an internal 
pull-down resistor of approximately 20 Kohms. 

In typical designs, the external pull-up resistors are re- 
commended. However, a particular design may have 
reason to adjust the resistor values recommended here, 
or alter the use of pull-up resistors in other ways. 

Other Connection Recommendations 

For reliable operation, always connect unused inputs to 
an appropriate signal level. NC pins should always re- 
main unconnected. 

Particularly when not using interrupts or bus hold, (as 
when first prototyping, perhaps) prevent any chance of 
spurious activity by connecting these associated inputs 
to GND. 



Pin 


Signal 


B7 


INTR 


B8 


NMI 


D14 


HOLD 



If not using address pipelining, pull-up D13 NA to Vcc. 



If not using 16-bit size, pull-up C14 BS16 to Vcc. 
Pull-ups in the range of 20 Kohms are recommended. 
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PHYSICAL DIMENSIONS 



CGX 132 
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Bottom View (Pins Facing Up) 



Side View 
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PHYSICAL DIMENSIONS (continued) 



PQB 132— Plastic Quad Flat Pack (Trimmed and Formed) 
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Top View 
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PHYSICAL DIMENSIONS (continued) 



PQB 132— Plastic Quad Flat Pack with Molded Carrier Ring 
(Outer Ring measured in millimeters) 
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High-Performance, 32-Bit Microprocessor 
with 16-Bit Data Bus 



a 



Advanced 

Micro 

Devices 



DISTINCTIVE CHARACTERISTICS 

■ 40-, 33-, 25-, and 20-MHz operating speeds 

■ True static design for long battery life in 
portable PCs 

— MHz (DC) minimum frequency 
-—Typical standby (DC) current < 20 uA 
—Typical operating current < 165 mA at 20 MHz 

—Wide range of chip set and BIOS support take 
advantage of standby mode capabilities 



Lower heat dissipation facilitates elimination of 
cooling fan in desktop PCs 

Pin-for-pin replacement of the Intel i386SX 

Supports 387SX-compatible math 
coprocessors 

100-pin PQFP package with optional protective 
ring for better lead coplanarity 

AMD advanced 0.8 micron CMOS technology 



GENERAL DESCRIPTION 

The Am386SX/SXL microprocessor is a high-speed, 
true static implementation of the Intel i386SX. It is ideal 
for both desktop and battery-powered notebook 
personal computers. For notebooks, the Am386SXL 
microprocessor's true static design offers longer battery 
life with low operating power consumption and standby 
mode. At 20 MHz, this device offers a current which is 
22% lower than the Intel i386SX. Standby mode allows 
the Am386SXL CPU to be clocked down to MHz (DC) 
and retain full register contents. Typical current in 
standby mode is reduced to less than 20 uA— nearly a 
1000x reduction in power consumption versus the 
Intel i386SX. 



For desktop PCs, the Am386SX/SXL microprocessor 
offers a 21 % increase in the maximum operating speed, 
from 33 to 40 MHz. Also, this device offers lower heat 
dissipation, allowing system designers to remove or re- 
duce the size and cost of the cooling fan. 

This device will be available in a standard 100-pin 
Plastic Quad Flat Pack (PQFP). This package may be 
shipped in an optional protective ring for better lead 
protection during manufacturing. 



Typical Power Consumption 




(Am386SX microprocessor only) 



O Intel i386SX @ 5.0 V 

A Am386SX/SXL CPU @ 5.0 V 

□ Am386SXLV CPU @ 3.3 V 



2 

Note: Inputs at Vcc or Vss. 



16 20 25 
Frequency (MHz) 



Publications 15022 Rev. D Amendment: /0 
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BLOCK DIAGRAM 
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Effective Address Bus 
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Queue 



Control 
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Bus Control 



/ 
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Adder 
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LOGIC SYMBOL 



2X Clock 


03 

A 


CLK2 
D15-D0 

A23-A1 
BLE, BH 

W/R 

D/C 

M/io 


FLT 
PEREQ 




Data Bus 






( 23 


ERROR 

BUSY 
E 

Am386SX/SXL NMI 
Microprocessor 

RESET 
INTR 

HLDA 
HOLD 




Address Bus < 


\ 

A 






( 2 






\ 

r a 














Bus Cycle * 
Definition 






LOCK 
ADS 

i 


4 




NA READY 

t t 





Float 



Math 

Coprocessor 

Control 



Interrupt Control 



ADS 



Bus 

Arbitration 

Control 



NA 



READY 



Bus Cycle Control 



15022B-003 



FUNCTIONAL DESCRIPTION 

True Static Operation (Am386SXL CPU) 

The Am386SXL microprocessor Incorporates a true 
static design. Unlike dynamic circuit design, the 
Am386SXL CPU eliminates the minimum operating 
frequency restriction. It may be clocked from its maxi- 
mum speed of 40 MHz all the way down to MHz 
(DC). System designers can use this feature to design 
battery-powered notebook PCs with long battery life. 

Standby Mode (Am386SXL CPU) 

This true static design allows for a standby mode. At any 
operating speed (40 to MHz), the Am386SXL micro- 
processor will retain its state (i.e., the contents of all 
its registers). By shutting off the clock completely, the 
device enters standby mode. Since power consumption 
is proportional to clock frequency, operating power 
consumption is reduced as the frequency is lowered. 
In standby mode, typical current draw is reduced to 
less than 20 uA at DC. 

Not only does this feature improve battery life, but it also 
simplifies the design of power-conscious notebook 
computers in the following ways: 



1 . Eliminates the need for software in the BIOS to save 
and restore the contents of registers. 

2. Allows simpler circuitry to control stopping of the 
clock since the system does not need to know what 
state the processor is in. 

Lower Operating lcc(Am386SXL CPU) 

True static design also allows lower operating Ice when 
operating at any speed. See the following graph for 
typical current at operating speeds. 

Performance On Demand (Am386SXL CPU) 

The Am386SXL microprocessor retains its state at any 
speed from MHz (DC) to its maximum operating 
speed. With this feature, system designers may vary the 
operating speed of the system to extend the battery life 
in portable systems. 

For example, the system could operate at low speeds 
during inactivity or polling operations. However, upon 
interrupt, the system clock can be increased up to its 
maximum speed. After a user-defined time-out period, 
the system can be returned to a low (or MHz) oper- 
ating speed without losing its state. This design maxi- 
mizes battery life while achieving optimal performance. 
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CONNECTION DIAGRAMS 

Top Side View— 100-Lead Plastic Quad Flat Pack 
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8 
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74 


ZD 
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m 
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72 


Z3 
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70 


ZD 
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67 
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65 
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59 
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DC 



Notes: Pin 1 is marked for orientation. 

NC = Not connected; connection of an NC pin may cause a malfunction or incompatibility 
with future shippings of the Am386SX/SXL microprocessor. 
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CONNECTION DIAGRAMS (continued) 

Pin Side View— 100-Lead Plastic Quad Flat Pack 
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Pin Side View 
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Notes: Pin 1 is marked for orientation. 

NC = Not connected; connection of an NC pin may cause a malfunction 

or incompatibility with future shippings of the Am386SX/SXL microprocessor. 
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PIN DESIGNATION TABLES (sorted by Functional Grouping) 



Address 


Data 


Control 


NC 


Vcc 


Vss 


Pin Name 


Pin No. 


Pin Name 


Pin No. 


Pin Name 


Pin No. 


Pin No. 


Pin No. 


Pin No. 


A1 


18 


DO 


1 


ADS 


16 


20 


8 


2 


A2 


51 


D1 


100 


BHE 


19 


27 


9 


5 


A3 


52 


D2 


99 


BLE 


17 


29 


10 


11 


A4 


53 


D3 


96 


BUSY 


34 


30 


21 


12 


A5 


54 


D4 


95 


CLK2 


15 


31 


32 


13 


A6 


55 


D5 


94 


D/C 


24 


43 


39 


14 


A7 


56 


D6 
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ERROR 


36 


44 


42 


22 


A8 


58 


D7 
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28 


45 


48 


35 
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62 


D8 

D9 
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D12 
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4 
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26 
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47 


57 
69 
71 
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49 
50 
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64 
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23 




84 


63 
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65 
66 
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6 
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91 
97 
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68 
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70 
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82 
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11 
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72 


81 
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78 
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RESET 
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85 
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74 
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98 
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75 
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76 
















A22 


79 
















A23 


80 

















PIN DESIGNATION TABLES (sorted by Pin Number) 



Pin No. 


Pin Name 


Pin No. 


Pin Name 


Pin No. 


Pin Name 


Pin No. 


Pin Name 


Pin No. 


Pin Name 


1 


DO 


21 


Vcc 


41 


Vss 


61 


A11 


81 


D15 


2 


Vss 


22 


Vss 


42 


Vcc 


62 


A12 


82 


D14 


3 


HLDA 


23 


M/IO 


43 


NC 


63 


Vss 


83 


D13 


4 


HOLD 


24 


D/C 


44 


NC 


64 


A13 


84 


Vcc 


5 
6 
7 


Vss 
NA 


25 
26 
27 


W/R 


45 
46 
47 


NC 
NC 
NC 


65 
66 
67 
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85 
86 
87 


Vss 
D12 
D11 


LOCK 
NC 


READY 


8 


Vcc 


28 


FLT 


48 


Vcc 


68 


Vss 


88 


D10 


9 


Vcc 


29 


NC 


49 


Vss 


69 


Vcc 


89 


D9 


10 


Vcc 


30 


NC 


50 


Vss 


70 


A16 


90 


D8 


11 


Vss 


31 


NC 


51 


A2 


71 


Vcc 


91 


Vcc 


12 


Vss 


32 


Vcc 


52 


A3 


72 


A17 


92 


D7 


13 


Vss 


33 


RESET 


53 


A4 


73 


A18 


93 


D6 


14 


Vss 


34 


BUSY 


54 


A5 


74 


A19 


94 


D5 


15 
16 


CLK2 
ADS 


35 
36 


Vss 


55 
56 


A6 
M 


75 
76 


A20 
A21 


95 
96 


D4 
D3 


ERROR 


17 


BLE 


37 


PEREQ 


57 


Vcc 


11 


Vss 


97 


Vcc 


18 


A1 


38 


NMI 


58 


A8 


78 


Vss 


98 


Vss 


19 


BHE 


39 


Vcc 


59 


A9 


79 


A22 


99 


D2 


20 


NC 


40 


INTR 


60 


A10 


80 


A23 


100 


D1 
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ORDERING INFORMATION 
Standard Products 

AMD standard products are available in several packages and operating ranges. The order number (Valid Combination) is 
formed by a combination of the elements below. 



NG 



80386SX/SXL 



-20 



OPTIONAL PROCESSING 

None = Trimmed and Formed PQFP in high-temp trays 
/F = Ringed PQFP in horizontal tubes 



TEMPERATURE RANGE 

Blank = Commercial (0°C to +100°C) 

SPEED OPTION 

-40=40 MHz (Am386SX microprocessor only) 
-33=33 MHz 
-25 = 25 MHz 
-20 = 20 MHz 
-16 = 16 MHz* 

DEVICE NUMBER/DESCRIPTION 

80386SX/SXL 

Am386SX/SXL High-Performance, 
Low-Power, 32-Bit Microprocessor with 
16-Bit Data Bus 

PACKAGE TYPE 

NG = 100-Pin Plastic Quad Flat Pack (PQB100) 



Valid Combinations 


NG 


80386SX 


-40, -40/F 


NG 


80386SX/SXL 


-33, -33/F 
-25, -25/F 
-20, -20/F 
-16*,-16/F* 



Valid Combinations 

Valid Combinations list configurations planned to 
be supported in volume for this device. Consult 
the local AMD sales office to confirm availability of 
specific valid combinations and to check on newly 
released combinations. 



*Contact AMD for 16-MHz availability. 
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PIN DESCRIPTIONS 

A23-A1 

Address Bus (Outputs) 

Outputs physical memory or port I/O addresses. 

ADS 

Address Status (Active Low; Output) 

Indicatesjtiat a v alid bus cyc le definition and address 
(W/R, D/C, M/IO, BHE, BLE, and A23-A1) are being 
driven at the Am386SX/SXL microprocessor pins. 

BHE, BLE 

Byte Enables (Active Low; Outputs) 

Indicate which data bytes of the data bus take part 
in a bus cycle. 



BUSY 

Busy (Active Low; Input) 

Signals a busy condition from a processor extension. 

CLK2 
CLK2 (Input) 

Provides the fundamental timing for the Am386SX/SXL 
microprocessor. 

D15-D0 

Data Bus (inputs/Outputs) 

Inputs data during memory, I/O, and interrupt 
acknowledge read cycles; outputs data during memory 
and I/O write cycles. 

DfC 

Data/Control (Output) 

A bus cycle definition pin that distinguishes data cycles, 
either memory or I/O, from control cycles which are: 
interrupt acknowledge, halt, and code fetch. 



ERROR 

Error (Active Low; Input) 

Signals an error condition from a processor extension. 

FLT 

Float (Active Low; Input) 

An input which forces all bidirectional and output 
signals, including HLDA, to the three-state condition. 

HLDA 

Bus Hold Acknowledge (Active High; Output) 

Output indicates that the Am386SX/SXL microproces- 
sor has surrendered control of its logical bus to another 
bus master. 



HOLD 

Bus Hold Request (Active High; Input) 

Input allows another bus masterto request control of the 
local bus. 

INTR 

Interrupt Request (Active High; Input) 

A maskable input that signals the Am386SX/SXL micro- 
processor to suspend execution of the current program 
and execute an interrupt acknowledge function. 



LOCK 

Bus Lock (Active Low; Output) 

A bus cycle definition pin that indicates that other 
system bus masters are not to gain control of the 
system bus while it is active. 

M/IO 

Memory/IO (Output) 

A bus cycle definition pin that distinguishes memory 
cycles from input/output cycles. 

NA 

Next Address (Active Low; Input) 

Used to request address pipelining. 

NC 

No Connect 

Should always be left unconnected. Connection of a NC 
pin may cause the processor to malfunction or be 
incompatible with future steppings of the Am386SX/ 
SXL microprocessor. 

NMI 

Non-Maskable Interrupt Request 

(Active High; Input) 

A non-maskable input that signals the Am386SX/SXL 
microprocessor to suspend execution of the current 
program and execute an interrupt acknowledge 
function. 

PEREQ 

Processor Extension Request (Active High; Input) 

Indicates that the processor has data to be transferred 
by the Am386SX/SXL microprocessor. 



READY 

Bus Ready (Active Low; Input) 

Terminates the bus cycle. 
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RESET 

Reset (Active High; Input) 

Suspends any operation In progress and places the 
Am386SX/SXL microprocessor in a known reset state. 

Vcc 

System Power (Input) 

Provides the +5 V nominal DC supply input. 



System Ground (Input) 

Provides the V connection from which all inputs and 
outputs are measured. 

W/R 

Write/Read (Output) 

A bus cycle definition pin that distinguishes write cycles 
from read cycles. 
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INTRODUCTION 

The Am386SX/SXL microprocessor is 100% object- 
code compatible with the Am386DX/DXL, 286, and 
8086 microprocessors. System manufacturers can 
provide Am386DX/DXL CPU-based systems optimized 
for performance and Am386SX/SXL CPU-based sys- 
tems optimized for cost, both sharing the same 
operating systems and application software. Systems 
based on the Am386SX/SXL microprocessor can 
access the world's largest existing microcomputer 
software base. 

Instruction pipelining, high-bus bandwidth, and a very 
high-performance ALU ensure short average instruction 
execution times and high system throughput. The 
Am386SX/SXL CPU is capable of execution at 
sustained rates of 2.5-3.0 million instructions per 
second (MIPS). 

The integrated Memory Management Unit (MMU) 
includes an address translation cache, advanced multi- 
tasking hardware, and a four-level hardware-enforced 
protection mechanism to support operating systems. 
The virtual machine capability of the Am386SX/SXL 
CPU allows simultaneous execution of applications 
from multiple operating systems such as MS-DOS and 
UNIX. 

The Am386SX/SXL CPU offers on-chip testability and 
debugging features. Four breakpoint registers allow 
conditional or unconditional breakpoint traps on code 
execution or data accesses for powerful debugging of 
even ROM-based systems. Other testability features 
include self-test, three-state of output buffers, and direct 
access to the page translation cache. 

BASE ARCHITECTURE 

The Am386SX/SXL microprocessor consists of a cen- 
tral processing unit, a Memory Management Unit, and a 
bus interface. 

The central processing unit consists of the execution 
unit and the instruction unit. The execution unit contains 
the eight 32-bit general purpose registers which are 
used for both address calculation and data operations 
and a 64-bit barrel shifter used to speed shift, rotate, 
multiply, and divide operations. The instruction unit 
decodes the instruction op-codes and stores them in the 
decoded instruction queue for immediate use by the 
execution unit. 

The MMU consists of a segmentation unit and a paging 
unit. Segmentation allows the managing of the logical 
address space by providing an extra addressing 
component, one that allows easy code and data 
repeatability, and efficient sharing. The paging 
mechanism operates beneath and is transparent to the 
segmentation process, to allow management of the 
physical address space. 



The segmentation unit provides four levels of protection 
for isolating and protecting applications and the 
operating system from each other. The hardware 
enforced protection allows the design of systems with a 
high degree of integrity. 

The Am386SX/SXL microprocessor has two modes of 
operation: Real Address Mode (Real Mode) and 
Protected Virtual Address Mode (Protected Mode). In 
Real Mode the Am386SX/SXL CPU operates as a very 
fast 8086, but with 32-bit extensions, if desired. Real 
Mode is required primarily to set up the processor for 
Protected Mode operation. 

Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 
semantics, thus allowing 8086 software (an application 
program or an entire operating system) to execute. The 
Virtual 8086 tasks can be isolated and protected from 
one another and the host Am386SX/SXL microproces- 
sor operating system by use of paging. 

Finally, to facilitate high-performance system hardware 
designs, the Am386SX/SXL microprocessor bus 
interface offers address pipelining and direct Byte 
Enable signals for each byte of the data bus. 

Register Set 

The Am386SX/SXL microprocessor has 34 registers as 
shown in Figure 1 . These registers are grouped into the 
following seven categories: 

General Purpose Registers: The eight 32-bit general 
purpose registers are used to contain arithmetic and 
logical operands. Four of these (EAX, EBX, ECX, and 
EDX) can be used either in their entirety as 32-bit 
registers, as 16-bit registers, or split into pairs of 
separate 8-bit registers. 

Segment Registers: Six 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. 

Flags and Instruction Pointer Registers: The two 

32-bit special purpose registers in Figure 1 record or 
control certain aspects of the Am386SX/SXL micropro- 
cessor state. The EFLAGS register includes status and 
control bits that are used to reflect the outcome of many 
instructions and modify the semantics of some 
instructions. The Instruction Pointer (EIP) is 32-bits 
wide. The EIP controls instruction fetching, and the 
processor automatically increments it after executing an 
instruction. 

Control Registers: The four 32-bit control registers are 
used to control the global nature of the Am386SX/SXL 
microprocessor. The CR0 register contains bits that set 
the different processor modes (Protected, Real, Paging, 
and Coprocessor Emulation). CR2 and CR3 registers 
are used in the paging operation. 
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31 16 


15 


8 


7 







AH 


A 


X 


AL 




BH 


B 


X 


BL 




CH 


C 


X 


CL 




DH 


D 


X 


DL 




SI 




Dl 




BP 




SP 



15 



31 



16 15 



31 



16 15 



MSW 



Page Fault Linear Address Register 



Page Directory Base Register 



16 15 





FLAGS 




IP 



EAX 

EBX 

ECX 

EDX 

ESI 

EDI 

EBP 

ESP 

CS 
SS 
DS 
ES 
FS 
GS 

EFLAGS"! 
EIP 



General Purpose Registers 



Segment Registers 
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31 





Linear Breakpoint Address 


Linear Breakpoint Address 1 


Linear Breakpoint Address 2 


Linear Breakpoint Address 3 






Breakpoint Status 


Breakpoint Control 


31 





Test Control 


Test Status 



CRO 
CR1 
CR2 
CR3 

GDTR 
IDTR 
LDTR 
TR 

DRO 
DR1 
DR2 
DR3 
DR4 
DR5 
DR6 
DR7 

TR6 
TR7 






Flags & Instruction Pointer 



Control Registers 



System Address Registers 



Debug Registers 



] 



Test Registers 



Reserved for future use — do not use. 
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Figure 1 . Am386SX/SXL Microprocessor Registers 
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System Address Registers: These four special regis- 
ters reference the tables or segments supported by 
the 80286/Am386SX/SXL/Am386DX/DXL CPU's pro- 
tection model. These tables or segments are: 

GDTR (Global Descriptor Table Register), 
IDTR (Interrupt Descriptor Table Register), 
LDTR (Local Descriptor Table Register), 
TR (Task State Segment Register). 

Debug Registers: The six programmer accessible de- 
bug registers provide on-chip support for debugging. 
The use of the debug registers is described in the sec- 
tion Debugging Support. 

Test Registers: Two registers are used to control the 
testing of the RAM/CAM (Content Addressable 
Memories) in the Translation Look-Aside Buffer portion 
of the Am386SX/SXL microprocessor. Their use is dis- 
cussed in the section Testability. 

EFLAGS Register 

The flag register is a 32-bit register named EFLAGS. 
The defined bits and bit fields within EFLAGS, shown in 
Figure 2, control certain operations and indicate the 
status of the Am386SX/SXL microprocessor. The lower 
16 bits (bits 15-0) of EFLAGS contain the 16-bit flag 
register named FLAGS. This is the default flag register 



used when executing 8086, 80286, or real mode code. 
The functions of the flag bits are given in Table 1 . 

Control Registers 

The Am386SX/SXL microprocessor has three control 
registers of 32 bits, CR3-CR0, to hold the machine 
state of a global nature. These registers are shown in 
Figures 1 and 2. The defined CRO bits are described in 
Table 2. 

Instruction Set 

The instruction set is divided into nine categories of 
operations: 

Data Transfer 

Arithmetic 

Shift/Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High-Level Language Support 

Operating System Support 

Processor Control 

These instructions are listed in the Instruction Set Clock 
Count Summary (pages 217 through 231). 



Special Fields : 

I/O Privilege Level ■ 
Nested Task - 



17 16 15 14 13 



12 



1110 9 8 



A ' A 



VM RF NT IOPL OF DF IF TF SF ZF AF PF 1 CF EFLAGS 



6 5 



4 3 



2 1 



Status Flags: 

Overflow 

Sign 

Zero 

Aux Carry 

Parity 

Carry 



E 



Control Flags: 

■ Trap 

■ Interrupt 

■ Direction 

■ Resume 

■ Virtual 8086 Mode 



Paging Enable 



Protection Enable ■ 

Monitor Coprocessor - 

Emulate Coprocessor ■ 

Task Switched ■ 



PG 



"/' 1 TS EM MP PE 



31 



16 15 
I 



MSW 



1 



CRO 



Figure 2. Status and Control Register Bit Functions 
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Table 1. Flag Definitions 



Bit Position 


Name 


Function 





CF 


Carry Flag — Set on high-order bit carry or borrow; cleared otherwise. 


2 


PF 


Parity Flag — Set if low-order 8 bits of result contain an even number of 1 bits; 
cleared otherwise. 


4 


AF 


Auxiliary Carry Flag — Set on carry from or borrow to the low-order 4 bits of 
AL; cleared otherwise. 


6 


ZF 


Zero Flag — Set if result is zero; cleared otherwise. 


7 


SF 


Sign Flag — Set equal to high-order bit of result (0 if positive, 1 if negative). 


8 


TF 


Single-Step Flag — Once set, a single-step interrupt occurs after the next 
instruction executes. TF is cleared by the single-step interrupt. 


9 


IF 


Interrupt-Enable Flag — When set, maskable interrupts will cause the CPU to 
transfer control to an interrupt vector specified location. 


10 


DF 


Direction Flag — Causes string instructions to auto-increment (default) the 
appropriate index registers when cleared. Setting DF causes auto-decrement. 


11 


OF 


Overflow Flag — Set if the operation resulted in a carry /borrow into the sign bit 
(high-order bit) of the result but did not result in a carry /borrow out of the high- 
order bit or vice-versa. 


12,13 


IOPL 


I/O Privilege Level — Indicates the maximum CPL permitted to execute I/O 
instructions without generating an Exception 13 fault or consulting the I/O 
permission bit map while executing in protected mode. For virtual 8086 mode 
it indicates the maximum CPL allowing alteration of the IF bit. 


14 


NT 


Nested Task — Indicates that the execution of the current task is nested within 
another task. 


16 


RF 


Resume Flag — Used in conjunction with debug register breakpoints. It is 
checked at instruction boundaries before breakpoint processing. If set, any 
debug fault is ignored on the next instruction. 


17 


VM 


Virtual 8086 Mode — If set while in protected mode, the Am386SXL micro- 
processor will switch to virtual 8086 operation, handling segment loads as 
8086 does, but generating Exception 13 faults on privileged op-codes. 



Table 2. CR0 Definitions 



Bit Position 


Name 


Function 





PE 


Protection Mode Enable — Places the Am386SXL microprocessor into pro- 
tected mode. If PE is reset, the processor operates again in Real Mode. PE 
may be set by loading MSW or CR0. PE can be reset only by loading CR0; 
it cannot be reset by the LMSW instruction. 


1 


MP 


Monitor Coprocessor Extension — Allows WAIT instructions to cause a 
processor extension Not Present exception (number 7). 


2 


EM 


Emulate Processor Extension — Causes a processor extension Not Present 
exception (number 7) on ESC instructions to allow emulating a processor 
extension. 


3 


TS 


Task Switched — Indicates the next instruction using a processor extension will 
cause Exception 7, allowing software to test whether the current processor 
extension context belongs to the current task. 


31 


PG 


Paging Enable Bit — Is set to enable the on-chip paging unit. It is reset to 
disable the on-chip paging unit. 
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All Am386SX/SXL microprocessor Instructions operate 
on either 0, 1 , 2, or 3 operands; an operand resides in a 
register, in the instruction itself, or in memory. Most zero 
operand instructions (e.g., CLI, STI) take only one byte. 
One operand instruction generally is two bytes long. The 
average instruction is 3.2-bytes long. Since the 
Am386SX/SXL CPU has a 16-byte prefetch instruction 
queue, an average of 5 instructions will be prefetched. 
The use of two operands permits the following types of 
common instructions: 

Register to Register 
Memory to Register 
Immediate to Register 
Memory to Memory 
Register to Memory 
Immediate to Memory 

The operands can be either 8, 16, or 32 bits long. As a 
general rule, when executing code written for the 
Am386SX/SXL microprocessor (32-bit code), operands 
are 8 or 32 bits; when executing existing 8086 or 80286 
code (16-bit code), operands are 8 or 16 bits. Prefixes 
can be added to all instructions which override the 
default length of the operands (i.e., use 32-bit operands 
for 16-bit code, or 16-bit operands for 32-bit code). 



Memory Organization 

Memory on the Am386SX/SXL microprocessor is 
divided into 8-bit quantities (Bytes), 16-bit quantities 
(Words), and 32-bit quantities (Dwords). Words are 
stored in two consecutive bytes in memory with the 
low-order byte at the lowest address. Dwords are stored 
in four consecutive bytes in memory with the low-order 
byte at the lowest address. The address of a Word or 
Dword is the byte address of the low-order byte. 

In addition to these basic data types, the Am386SX/SXL 
microprocessor supports two larger units of memory: 
pages and segments. Memory can be divided up into 
one or more variable length segments, which can be 
swapped to disk or shared between programs. Memory 
can also be organized into one or more 4-Kb pages. 
Finally, both segmentation and paging can be 
combined, gaining the advantages of both systems. 
The Am386SX/SXL CPU supports both pages and 
segmentation in order to provide maximum flexibility to 
the system designer. Segmentation and paging are 
complementary. Segmentation is useful for organizing 
memory in logical modules, and, as such, is a tool for the 
application programmer, while pages are useful to the 
system programmer for managing the physical memory 
of a system. 



Effective Address Calculation 
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Figure 3. Address Translation 
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Address Spaces 

The Am386SX/SXL microprocessor has three types of 
address spaces: logical, linear, and physical. A logical 
address (also known as a virtual address) consists of a 
selector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing all of 
the addressing components (Base, Index, Displace- 
ment) discussed in the section Addressing Modes, into 
an effective address. This effective address, along with 
the selector, is known as the logical address. Since each 
task on the Am386SX/SXL CPU has a maximum of 1 6K 
(2 14 -1) selectors, and offsets can be 4 Gb (with paging 
enabled), this gives a total of 2 46 bits, or 64 tb, of logical 
address space per task. The programmer sees the 
logical address space. 

The segmentation unit translates the logical address 
space into a 32-bit linear address space. If the paging 
unit is not enabled then the 32-bit linear address is 
truncated into a 24-bit physical address. The physical 
address is what appears on the address pins. 

The primary differences between Real Mode and 
Protected Mode are how the segmentation unit 
performs the translation of the logical address into the 
linear address, size of the address space, and paging 
capability. In Real Mode, the segmentation unit shifts 
the selector left four bits and adds the result to the 
effective address to form the linear address. This linear 
address is limited to 1 Mb. In addition, Real Mode has 
no paging capability. 

Protected Mode will see one of two different address 
spaces, depending on whether or not paging is enabled. 
Every selector has a logical base address associated 
with it that can be up to 32 bits in length. This 32-bit 
logical base address is added to the effective address to 
form a final 32 -bit linear address. If paging is disabled, 
this final linear address reflects physical memory and is 
truncated so that only the lower 24 bits of this address 
are used to address the 1 6-Mb memory address space. 
If paging is enabled, this final linear address reflects a 
32-bit address that is translated through the paging unit 
to form a 16-Mb physical address. The logical base 
address is stored in one of two operating system tables 
(i.e., the Local Descriptor Table or Global Descriptor 
Table). 

Figure 3 shows the relationship between the various 
address spaces. 

Segment Register Usage 

The main data structure used to organize memory is the 
segment. On the Am386SX/SXL CPU, segments are 
variable sized blocks of linear addresses which have 
certain attributes associated with them. There are two 
main types of segments, code and data. The segments 
are of variable size and can be as small as 1 byte or as 
large as 4 Gb (2 32 bits). 

In order to provide compact instruction encoding and 
increase processor performance, instructions do not 
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need to explicitly specify which segment register is 
used. The segment register is automatically chosen 
according to the rules of Table 3 (Segment Register 
Selection Rules). In general, data references use the 
selector contained in the DS register; stack references 
use the SS register; and, instruction fetches use the CS 
register. The contents of the Instruction Pointer provide 
the offset. Special segment override prefixes allow the 
explicit use of a given segment register and override the 
implicit rules listed in Table 3. The override prefixes also 
allow the use of the ES, FS, and GS segment registers. 

There are no restrictions regarding the overlapping of 
the base addresses of any segments. Thus, all six 
segments could have the base address set to zero and 
create a system with 4-Gb linear address space. 
This creates a system where the virtual address space 
is the same as the linear address space. Further details 
of segmentation are discussed in the section Protected 
Mode Architecture. 

Addressing Modes 

The Am386SX/SXL microprocessor provides a total of 
eight addressing modes for instructions to specify 
operands. The addressing modes are optimized to allow 
the efficient execution of high-level languages such as C 
and FORTRAN, and they coverthe vast majority of data 
references needed by high-level languages. 

Register and Immediate Modes 

Two of the addressing modes provide for instructions 
that operate on register or immediate operands. 

Register Operand Mode: The operand is located in 
one of the 8-, 16-, or 32-bit general registers. 

Immediate Operand Mode: The operand is included in 
the instruction as part of the op-code. 

32-Bit Memory Addressing Modes 

The remaining six modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by summing any com- 
bination of the following three address elements (see 
Figure 3). 

Displacement: an 8-, 16-, or 32-bit immediate value, 
following the instruction. 

Base: The contents of any general purpose register. 
The base registers are generally used by compilers to 
point to the start of the local variable area. 

Index: The contents of any general purpose register 
except for ESP. The index registers are used to access 
the elements of an array or a string of characters. The 
index register's value can be multiplied by a scale factor, 
either 1 , 2, 4, or 8. The scaled index is especially useful 
for accessing arrays or structures. 
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Table 3. Segment Register Selection Rules 



Type of Memory Reference 


Implied (Default) Segment Use 


Segment Override Prefixes Possible 


Code Fetch 


CS 


None 


Destination of PUSH, PUSHF, INT, 
CALL, PUSHA Instructions 


ss 


None 


Source of POP, POPA, POPF, 
IRET, RET Instructions 


ss 


None 


Destination of STOS, MOVE, REP 
STOS, REP MOVS Instructions 


ES 


None 


Other Data References, with 
Effective Address Using Base 
Register of: 






[EAX] 


DS 


CS, SS, ES, FS, GS 


[EBX] 


DS 


CS, SS, ES, FS, GS 


[ECX] 


DS 


CS, SS, ES, FS, GS 


[EDX] 


DS 


CS, SS, ES, FS, GS 


[ESI] 


DS 


CS, SS, ES, FS, GS 


[EDI] 


DS 


CS, SS, ES, FS, GS 


[EBP] 


SS 


CS, DS, ES, FS, GS 


[ESP] 


SS 


CS, DS, ES, FS, GS 



Combinations of these three components make up the 
six additional addressing modes. There is no perform- 
ance penalty for using any of these addressing 
combinations, since the effective address calculation is 
pipelined with the execution of other instructions. The 
one exception is the simultaneous use of Base and 
Index components which requires one additional clock. 

As shown in Figure 4, the Effective Address (EA) of 
an operand is calculated according to the following 
formula: 

EA = BaseRegister + (IndexRegister x Scaling) + Displacement 

1. Direct Mode: The operand's offset is contained as 
part of the instruction as an 8-, 16-, or 32-bit 
displacement. 

2. Register Indirect Mode: A Base register contains 
the address of the operand. 

3. Based Mode: A Base register's contents are added 
to a Displacement to form the operand's offset. 

4. Scaled Index Mode: An Index register's contents 
are multiplied by a Scaling factor, and the result is 
added to a Displacement to form the operand's 
offset. 

5. Based Scaled Index Mode: The contents of an 
Index register are multiplied by a Scaling factor, and 
the result is added to the contents of a Base register 
to obtain the operand's offset. 

6. Based Scaled Index Mode with Displacement: 

The contents of an Index register are multiplied by a 
Scaling factor, and the result is added to the contents 
of a Base register and a Displacement to form the 
operand's offset. 



Differences Between 16- and 32-Bit Addresses 

In order to provide software compatibility with the 8086 
and the 80286, the Am386SX/SXL microprocessor can 
execute 16-bit instructions in Real and Protected 
Modes. The processor determines the size of the 
instructions it is executing by examining the D bit in a 
Segment Descriptor. If the D bit is 0, then all operand 
lengths and effective addresses are assumed to be 
16-bits long. If the D bit is 1 , then the default length for 
operands and addresses is 32 bits. In Real Mode the 
default size for operands and addresses is 16 bits. 

Regardless of the default precision of the operands or 
addresses, the Am386SX/SXL microprocessor is able 
to execute either 16- or 32-bit instructions. This is 
specified through the use of override prefixes. Two 
prefixes, the Operand Length Prefix and the Address 
Length Prefix, override the value of the D bit on an 
individual instruction basis. These prefixes are 
automatically added by assemblers. 

The Operand Length and Address Length Prefixes can 
be applied separately or in combination to any 
instruction. The Address Length Prefix does not allow 
addresses over 64 Kb to be accessed in Real Mode. 
A memory address which exceeds OFFFFH will result 
in a General Protection Fault. An Address Length Prefix 
only allows the use of the additional Am386SX/SXL 
CPU addressing modes. 

When executing 32-bit code, the Am386SX/SXL CPU 
uses either 8- or 32-bit displacements, and any register 
can be used as Base or Index registers. When executing 
1 6-bit code, the displacements are either 8- or 1 6-bits, 
and the Base and Index registers conform to the 
80286 model. Table 4 illustrates the differences. 
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Data Types 

The Am386SX/SXL microprocessor supports all of the 
data types commonly used in high-level languages. 

Bit: A single bit quantity. 

Bit Field: A group of up to 32 contiguous bits, which 
spans a maximum of four bytes. 

Bit String: A set of contiguous bits; on the Am386SX/ 
SXL microprocessor, bit strings can be up to 4 Gbits 
long. 

Byte: A signed 8-bit quantity. 

Unsigned Byte: An unsigned 8-bit quantity. 

Integer (Word): A signed 16-bit quantity. 

Long Integer (Dword): A signed 32-bit quantity. All 
operations assume a 2's complement representation. 

Unsigned Integer (Word): An unsigned 1 6-bit quantity. 

Unsigned Long Integer (Dword): An unsigned 32-bit 
quantity. 

Signed Quad Word: A signed 64-bit quantity. 



Unsigned Quad Word: An unsigned 64-bit quantity. 

Pointer: A 16- or 32-bit offset-only quantity which 
indirectly references another memory location. 

Long Pointer: A full pointer which consists of a 16-bit 
segment selector and either a 1 6- or 32 -bit offset. 

Char: A byte representation of an ASCII alphanumeric 
or control character. 

String: A contiguous sequence of bytes, Words, or 
Dwords. A string may contain between 1 byte and 4 Gb. 

BCD: A byte (unpacked) representation of decimal 
digits 0-9. 

Packed BCD: A byte (packed) representation of two 
decimal digits 0-9 storing one digit in each nibble. 

When the Am386SX/SXL microprocessor is coupled 
with a 387SX math coprocessor, the following common 
floating point types are supported. 

Floating Point: A signed 32-, 64-, or 80-bit real number 
representation. Floating point numbers are supported 
by 387SX-compatible math coprocessors. 
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Table 4. Base and Index Registers for 16- and 
32-Bit Addresses 





16-Bit 
Addressing 


32-Bit 
Addressing 


Base Register 
Index Register 

Scale Factor 
Displacement 


BX, BP 
SI, Dl 

None 
0,8, 16 bits 


Any 32-bit GP Register 
Any 32-bit GP Register 
Except ESP 

1,2,4,8 
0, 8, 32 bits 



Figure 5 illustrates the data types supported by 
the Am386SX/SXL microprocessor and a 387SX- 
compatible math coprocessor. 

I/O Space 

The Am386SX/SXL CPU has two distinct physical 
address spaces: physical memory and I/O. Generally, 
peripherals are placed in I/O space, although the 
Am386SX/SXL CPU also supports memory-mapped 
peripherals. The I/O space consists of 64 Kb which can 
be divided into 64K 8-bit ports or 32K 1 6-bit ports, or any 
combination of ports which add up to no more than 
64 Kb. The 64Kb I/O address space refers to physical 
addresses rather than linear addresses since I/O 
instructions do not go through the segmentation or 
paging hardware. The M/IO pin acts as an additional 
address line, thus allowing the system designerto easily 
determine which address space the processor is 
accessing. 

The I/O ports are accessed by the In and Out 
instructions, with the port address supplied as an 
immediate 8-bit constant in the instruction or in the DX 
register. All 8-bit and 16-bit port addresses are zero 
extended on the upper_ address lines. The I/O 
instructions cause the M/IO pin to be driven Low. I/O 
port addresses 00F8H through 00FFH are reserved for 
future use. 

Interrupts and Exceptions 

Interrupts and exceptions alter the normal program 
flow in order to handle external events, report errors, 
or report exceptional conditions. The difference be- 
tween interrupts and exceptions is that interrupts are 
used to handle asynchronous external events while 
exceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an INT n 
instruction, the processor treats software interrupts as 
exceptions. 

Hardware interrupts occur as the result of an external 
event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the interrupt 
handler is finished servicing the interrupt, execution 
proceeds with the instruction immediately after the 
interrupted instruction. 

Exceptions are classified as faults, traps, or aborts, 
depending on the way they are reported and whether 



or not restart of the instruction causing the exception is 
supported. Faults are exceptions that are detected and 
serviced before the execution of the faulting instruction. 
Traps are exceptions that are reported immediately 
after the execution of the instruction which caused the 
problem. Aborts are exceptions that do not permit the 
precise location of the instruction causing the exception 
to be determined. 

Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 
immediately following the interrupted instruction. On the 
other hand, the return address from an exception fault 
routine will always point to the instruction causing the 
exception and will include any leading instruction 
prefixes. Table 5 summarizes the possible interrupts for 
the Am386SX/SXL microprocessor and shows where 
the return address points. 

The Am386SX/SXL CPU has the ability to handle up to 
256 different interrupts/exceptions. In order to service 
the interrupts, a table with up to 256 interrupt vectors 
must be defined. The interrupt vectors are simply 
pointers to the appropriate interrupt service routine. In 
Real Mode, the vectors are 4-byte quantities, a Code 
Segment plus a 16-bit offset; in Protected Mode, 
the interrupt vectors are 8-byte quantities which are 
put in an Interrupt Descriptor Table. Of the 256 possible 
interrupts, 32 are reserved for future use and the re- 
maining 224 are free to be used by the system designer. 

Interrupt Processing 

When an interrupt occurs, the following actions happen. 
First, the current program address and Flags are saved 
on the stack to allow resumption of the interrupted 
program. Next, an 8-bit vector is supplied to the 
Am386SX/SXL microprocessor which identifies the ap- 
propriate entry in the interrupt table. The table contains 
the starting address of the interrupt service routine. 
Then, the user supplied interrupt service routine is 
executed. Finally, when an IRET instruction is executed 
the old processor state is restored and program 
execution resumes at the appropriate instruction. 

The 8-bit interrupt vector is supplied to the Am386SX/ 
SXL microprocessor in several different ways: excep- 
tions supply the interrupt vector internally; software INT 
instructions contain or imply the vector; maskable 
hardware interrupts supply the 8-bit vector via the 
interrupt acknowledge bus sequence. Non-Maskable 
hardware interrupts are assigned to interrupt vector 2. 

Maskable Interrupt 

Maskable interrupts are the most common way to 
respond to asynchronous external hardware events. A 
hardware interrupt occurs when the INTR is pulled High 
and the Interrupt Flag bit (IF) is enabled. The processor 
only responds to interrupts between instructions (string 
instructions have an interrupt window between mem- 
ory moves that allows interrupts during long string 



158 



Am386 Microprocessors for Personal Computers 



AMD 



a 





7 





Signed 
Byte 




1 1 | 1 1 1 


Sign Bit - 


J 

7 


1 1 


Magnitude 



Unsigned 
Byte 


|ll|lll 




1 



+1 



Binary 

Coded 

Decimal 

(BCD) 



ASCII 



I I I I I I I 



7 07 

" Illlll 111 I I I I I I 



n 



BCD 
Digit N 

+N 

I Z 



I I | I I I 



BCD BCD 

Digit 1 Digit 

+1 

SU- 



1 1 I I I I III I I I I I I 



Magnitude 

+1 

1 5 14 8_7 

Signed 
Word 



ASCII ASCII ASCII 

Character Characteri Charactero 



I I I I I 



I M I I 



Sign Bit -J L MSB 



Magnitude 





+N 
7 


+ 
7 


1 ( 
7 





Packed BCD 


1 1 1 | II 1 


■ •• 


1 1 1 


"T" 


1 1 1 




1 1 






1 


| 


Most 

Significant 

Digit 

+N 


+ 


Least 
Bignifica 

Digit 
3 



Unsigned 
Word 



I I I | I I I 



I I I | I I I 



7/15 



String 



T*T 



rrr 



M 



trv 



07, 



M l| I I I 



m 



TTT 



Signed 

Double 

Word 



Magnitude 

cm +3 +2 +1 

31 16 15 

I I | I I I | I I I | I I I | I I I | I I I 



+2 Gbits 



I I I | I I I 



Bit 
String 



-2 Gbits 
,2,1,0, 



Sign Bit J L MSB 



Unsigned 

Double 

Word 



31 +3 
I I I | I I I 



Magnitude 
+2 +1 



I I I | I I I 



I I I | I I I 



i_ 



31 

I I I |l I I I Short 

32-Bit 

| Pointer 

I L- 



+3 



I « I I I I 



BitO 
+2 +1 

-rrn-r 



1 1 i | i i i 



o 

I I I 1 1 I I 



Signed 
Quad 
Word 



Magnitude 

+7 +6 +5 +4 +3 +2 +1 +5 +4 +3 

63 48 47 32 31 16J5 47 

Long 1 1 l 1 1 1 1 l 
48-Bit 
Pointer 



Offset 

+2 +1 



II l|IM 



II 1 1 1 1 1 



II l|lll 



TTTJTTT 



II l|lll 



Sign Bit J J- MSB 



J L 



Magnitude 



Selector 



Offset 





79 


+9 


+8 


+7 


+6 




+5 


+4 


+3 




+2 


+1 





Floating 
Point* 
























Sign Bit • 


J i i 


I 




Exponent 

+5 +4 h 


Magnitude 
h3 +2 +1 


32-Bit 
Bit Field 


II l|lll 


II l|lll 


II l|lll 


II Ijlll 


II l|ll 1 


II Ijlll 



Bit Field — u 

1 to 32 Bits ^ 

*Supported by a 387SX-compatible math coprocessor 

Figure 5. Am386SX/SXL Microprocessor Supported Data Types 



15021B-013 



Am386SX/SXL Microprocessor Data Sheet 



159 



AMD 



Table 5. Interrupt Vector Assignments 


Function 


Interrupt 
Number 


Instruction Which 
Can Cause Exception 


Return Address Points 
to Faulting Instruction 


Type 


Divide Error 





DIV, IDIV 


Yes 


FAULT 


Debug Exception 


1 


Any Instruction 


Yes 


TRAP* 


NMI Interrupt 


2 


INT2orNMI 


No 


NMI 


One Byte Interrupt 


3 


INT 


No 


TRAP 


Interrupt on Overflow 


4 


INTO 


No 


TRAP 


Array Bounds Check 


5 


BOUND 


Yes 


FAULT 


Invalid Op-code 


6 


Any Illegal Instruction 


Yes 


FAULT 


Device Not Available 


7 


ESC, WAIT 


Yes 


FAULT 


Double Fault 


8 


Any instruction that can generate an 
exception 




ABORT 


Coprocessor Segment Overrun 


9 


ESC 


No 


ABORT 


Invalid TSS 


10 


JMP, CALL, IRET, INT 


Yes 


FAULT 


Segment Not Present 


11 


Segment Register Instructions 


Yes 


FAULT 


Stack Fault 


12 


Stack References 


Yes 


FAULT 


General Protection Fault 


13 


Any Memory Reference 


Yes 


FAULT 


Page Fault 


14 


Any Memory Access or Code Fetch 


Yes 


FAULT 


Coprocessor Error 


16 


ESC, WAIT 


Yes 


FAULT 


Reserved for Future Use 


17-32 








Two Byte Interrupt 


0-255 


INTn 


No 


TRAP 


Note: Some debug exceptions may report both traps on the previous instruction and faults on the next instruction. 



moves). When an interrupt occurs the processor reads 
an 8-bit vector supplied by the hardware which identifies 
the source of the interrupt (one of 224 user defined 
interrupts). 

Interrupts through interrupt gates automatically reset IF 
bit, disabling INTR requests. Interrupts through Trap 
Gates leave the state of the IF bit unchanged. Interrupts 
through a Task Gate change the IF bit according to the 
image of the EFLAGs register in the task's Task State 
Segment (TSS). When an IRET instruction is executed, 
the original state of the IF bit is restored. 

Non-Maskable Interrupt 

Non-maskable interrupts provide a method of servicing 
very high priority interrupts. When the NMI input is 
pulled High it causes an interrupt with an internally 
supplied vector value of 2. Unlike a normal hardware 
interrupt, no interrupt acknowledgment sequence is 
performed for an NMI. 

While executing the NMI servicing procedure, the 
Am386SX/SXL microprocessor will not service any fur- 
ther NMI request or INT requests until an Interrupt Re- 
turn (IRET) instruction is executed or the processor is 
reset. If NMI occurs while currently servicing an NMI, its 
presence will be saved for servicing after executing the 
first IRET instruction. The IF bit is cleared at the begin- 
ning of an NMI interrupt to inhibit further INTR interrupts. 

Software Interrupts 

Athirdtype of interrupt/exception for the Am386SX/SXL 
CPU is the software interrupt. An INT n instruction 



causes the processor to execute the interrupt service 
routine pointed to by the nth vector in the interrupt table. 

A special case of the two byte software interrupt INT n is 
the one byte INT 3, or breakpoint interrupt. By inserting 
this one byte instruction in a program, the user can set 
breakpoints in his program as a debugging tool. 

A final type of software interrupt is the single-step 
interrupt. It is discussed in section Single-Step Trap. 

Interrupt and Exception Priorities 

Interrupts are externally generated events. Mask- 
able Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at instruc- 
tion boundaries. When NMI and maskable INTR are 
both recognized at the same instruction boundary, the 
Am386SX/SXL microprocessor invokes the NMI 
service routine first. If maskable interrupts are still 
enabled afterthe NMI service routine has been invoked, 
then the Am386SX/SXL CPU will invoke the appropriate 
interrupt service routine. 

As the Am386SX/SXL microprocessor executes in- 
structions, it follows a consistent cycle in checking for 
exceptions, as shown in Table 6. This cycle is repeated 
as each instruction is executed, and occurs in parallel 
with instruction decoding and execution. 

Instruction Restart 

The Am386SX/SXL microprocessor fully supports re- 
starting all instructions after Faults. If an exception is 
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detected in the instruction to be executed (exception 
categories 4 through 1 in Table 6), the Am386SX/SXL 
microprocessor invokes the appropriate exception 
service routine. The Am386SX/SXL microprocessor is 
in a state that permits restart of the instruction, for all 
cases by those given in Table 7. Note that all such 
cases will be avoided by a properly designed operating 
system. 

Double Fault 

A Double Fault (Exception 8) results when the 
processor attempts to invoke an exception service 
routine for the segment exceptions (10, 11, 12, or 13), 
but in the process of doing so detects an exception other 
than a Page Fault (Exception 14). 

One other cause of generating a Double Fault is the 
Am386SX/SXL CPU detecting any other exception 
when it is attempting to invoke the Page Fault (Excep- 
tion 14) service routine (e.g., if a Page Fault is detected 
when the Am386SX/SXL microprocessor attempts to in- 
voke the Page Fault service routine). Of course, in any 
functional system, not only the Am386SX/SXL CPU- 



based systems, the entire Page Fault service must 
remain present in memory. 

Reset and Initialization 

When the processor is initialized or Reset, the registers 
have the values shown in Table 8. The Am386SX/SXL 
CPU will then start executing instructions near the 
top of physical memory, at location 0FFFFF0H. When 
the first intersegment Jump or Call is executed, address 
lines A23-A20 will drop Low for CS-relative memory 
cycles, and the Am386SX/SXL CPU will only execute 
instructions in the lower 1 Mb of physical memory. This 
allows the system designer to use a shadow ROM at the 
top of physical memory to initialize the system and take 
care of Resets. 

Reset forces the Am386SX/SXL microprocessor to 
terminate all execution and local bus activity. No 
instruction execution or bus activity will occur as long as 
Reset is active. Between 350- and 450-CLK2 periods 
after Reset becomes inactive, the Am386SX/SXL mi- 
croprocessor will start executing instructions at the top 
of physical memory. 



Table 6. Sequence of Exception Checking 



Consider the case of the Am386SXL microprocessor having just completed an instruction. It then performs the following checks 
before reaching the point where the next instruction is completed. 



Check for Exception 1 Traps from the instruction just completed (single-step via Trap Flag, or Data Breakpoints set in the 
Debug Registers). 

Check for external NMI and INTR. 

Check for Exception 1 Faults in the next instruction (Instruction Execution Breakpoint set in the Debug Registers for the next 
instruction). 

Check for Segmentation Faults that prevented fetching the entire next instruction (Exceptions 1 1 and 13). 

Check for Page Faults that prevented fetching the entire next instruction (Exception 14). 

Check for Faults decoding the next instruction (Exception 6 if illegal op-code; Exception 6 if in Real Mode or in Virtual 8086 
Mode and attempting to execute an instruction for Protected Mode only; or Exception 1 3 if instruction is longer than 1 5 bytes, or 
privilege violation in Protected Mode (i.e., not at IOPL or at CPL = 0))\ 

7. If WAIT op-code, check if TS = 1 and MP = 1 (Exception 7 if both are 1 ). 

8. If ESCape op-code for math coprocessor, check if EM = 1 or TS = 1 (Exception 7 if either are 1 ). 

9. If WAIT op-code or ESCape op-code for math coprocessor, check ERROR input signal (Exception 16 if ERROR input is 
asserted). 

10. Check in the following order for each memory reference required by the instruction. 

a. Check for Segmentation Faults that prevent transferring the entire memory quantity (Exceptions 11,12, and 13). 

b. Check for Page Faults that prevent transferring the entire memory quantity (Exception 14). 
Note: Segmentation exceptions are generated before paging exceptions. 



Table 7. Conditions Preventing Instruction Restart 



An instruction causes a task switch to a task whose Task State Segment (TSS) is partially not present (an entire not present 
TSS is restartable). Partially present TSSs can be avoided either by keeping the TSSs of such tasks present in memory, or by 
aligning TSS segments to reside entirely within a single 4K page (for TSS segments of 4 Kb or less). 

A coprocessor operand wraps around the top of a 64-Kb segment or a 4-Gb segment and spans three pages, and the page 
holding the middle portion of the operand is not present This condition can be avoided by starting at a page boundary any 
segments containing coprocessor operands, if the segments are approximately 64K-200K bytes or larger (i.e., large enough 
for wraparound of the coprocessor operand to possibly occur). 



Note: These conditions are avoided by using the operating system designs mentioned in this table. 
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Table 8. Register Values after Reset 



Flag Word (EFLAGS) 


uuuu0002H 


Notel 


Machine Status Word (CRO) 


uuuuuulOH 




Instruction Pointer (EIP) 


0000FFF0H 




Code Segment (CS) 


FOOOH 


Note 2 


Data Segment (DS) 


0000H 


Note 3 


Stack Segment (SS) 


0000H 




Extra Segment (ES) 


0000H 


Note 3 


Extra Segment (FS) 


OOOOH 




Extra Segment (GS) 


OOOOH 




EAX Register 


OOOOH 


Note 4 


EDX Register 


Component and Stepping ID 


Note 5 


All Other Registers 


Undefined 


Note 6 



Notes: 1 . EFLAGS Register. The upper 14 bits of the EFLAGS register are undefined; all defined flag bits are zero. 

2. The Code Segment register (CS) will have its Base Address set to OFFFFOOOOH and Limit set to OFFFFH. 

3. The Data and Extra Segment registers (DS and ES) will have their Base Address set to 000000000H and Limit set to OFFFFH. 

4. If self-test is selected, the EAX register should contain a value. If a value of is not found, the self-test has detected a flaw in 
the part. 

5. EDX register always holds a component and stepping identifier. 

6. All undefined bits are reserved for future use and should not be used. 



Testability 

The Am386SX/SXL microprocessor, like the Am386DX/ 
DXL microprocessor, offers testability features that in- 
clude a self-test and direct access to the page 
translation cache. 

Self-Test 

The Am386SX/SXL microprocessor has the capability 
to perform a self-test. The self-test checks the function 
of all of the Control ROM and most of the non-random 
logic of the part. Approximately one-half of the 
Am386SX/SXL CPU can be tested during self-test. 

Self-Test is initiated on the Am386SX/SXL micropro- 
cessor whenthe Reset pin transitions from High to Low, 
and the BUSY pin is Low. The self-test takes about 2 20 
clocks, or approximately 33 ms with a 16-MHz 
Am386SX/SXL CPU. At the completion of self-test the 
processor performs reset and begins normal operation. 
The part has successfully passed self-test if the 
contents of the EAX are zero. If the results of the EAX 
are not zero, then the self -test has detected a flaw in 
the part. 

TLB Testing 

The Am386SX/SXL microprocessor also provides a 
mechanism for testing the Translation Look-Aside 
Buffer (TLB), if desired. This particular mechanism may 
not be continued in the same way in future processors. 

There are two TLB testing operations: 1) writing entries 
into the TLB; and, 2) performing TLB lookups. Two test 
registers, shown in Figure 6 are provided for the 
purpose of testing. TR6 is the test command register, 
and TR7 is the test data register. 



Debugging Support 

The Am386SX/SXL microprocessor provides several 
features which simplify the debugging process. The 
three categories of on-chip debugging aids are: 

1. The code execution breakpoint op-code (OCCH). 

2. The single-step capability provided by the TF bit in 
the flag register. 

3. The code and data breakpoint capability provided by 
the Debug Registers DR3-DR0, DR6, and DR7. 

Breakpoint Instruction 

A single-byte software interrupt (INT 3) breakpoint 
instruction is available for use by software debuggers. 
The breakpoint op-code is OCCH, and generates an 
Exception 3 trap when executed. 

Single-Step Trap 

If the single-step flag (TF, bit 8) in the EFLAGS register 
is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step exception 
is auto-vectored to Exception 1 . 

Debug Registers 

The Debug Registers are an advanced debugging 
feature of the Am386SX/SXL microprocessor. They 
allow data access breakpoints as well as code 
execution breakpoints. Since the breakpoints are 
indicated by on-chip registers, an instruction execution 
breakpoint can be placed in ROM code or in code 
shared by several tasks, neither of which can be 
supported by the INT 3 breakpoint op-code. 

The Am386SX/SXL microprocessor contains six De- 
bug Registers, consisting of four breakpoint address 
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Table 9. Exceptions in Real Mode 



Function 


Interrupt 
Number 


Related 
Instructions 


Return 
Address Location 


Interrupt table limit too small 


8 


INT vector is not within table limit 


Before 
Instruction 


CS, DS, ES, FS, GS 
Segment Overrun exception 


13 


Word memory reference with 
offset = OFFFFH. An attempt to 
execute past the end of CS segment. 


Before 
Instruction 


SS Segment Overrun exception 


12 


Stack Reference 
beyond offset = OFFFFH. 


Before 
Instruction 



Command • 

Writable ■ 

User • 

Dirty ■ 

Valid ■ 



Test 
Control 



Linear Address 



V D D U D W W 



C TR6 



31 



12 11 10 9 8 



Physical Address 




PL 


I 
REP 

i 





Test 
Status 

TR7 



31 



12 



4 3 2 



Reserved for future use — do not use. 



Figure 6. Test Registers 
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registers and two breakpoint control registers. Initially 
after reset, breakpoints are in the disabled state; 
therefore, no breakpoints will occur unless the Debug 
Registers are programmed. Breakpoints set up in the 
Debug Registers are auto-vectored to Exception 1. 
Figure 7 shows the breakpoint status and control 
registers. 

REAL MODE ARCHITECTURE 

When the processor is reset or powered up it is 
initialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 32-bit 
register set of the Am386SX/SXL microprocessor. The 
addressing mechanism, memory size, and interrupt 
handling are all identical to the Real Mode on the 80286. 

The default operand size in Real Mode is 16 bits, as in 
the 8086. In order to use the 32-bit registers and 
addressing modes, override prefixes must be used. In 
addition, the segment size on the Am386SX/SXL micro- 
processor in Real Mode is 64 Kb, so 32-bit addresses 
must have a value less than 0000FFFFH. The primary 
purpose of Real Mode is to set up the processor for 
Protected Mode operation. 



Memory Addressing 

In Real Mode the linear addresses are the same as 
physical addresses (paging is not allowed). Physical 
addresses are formed in Real Mode by adding the 
contents of the appropriate segment register which is 
shifted left by four bits to an effective address. This 
addition results in a 20-bit physical address or a 1-Mb 
address space. Since segment registers are shifted left 
by 4 bits, Real Mode segments always start on 16-byte 
boundaries. 

All segments in Real Mode are exactly 64-Kb long, and 
may be read, written, or executed. The Am386SX/SXL 
microprocessor will generate an Exception 13 if a data 
operand or instruction fetch occurs past the end of a 
segment. 

Reserved Locations 

There are two fixed areas in memory that are reserved 
in Real Address Mode: the system initialization area 
and the interrupt table area. Locations 00000H through 
003FFH are reserved for interrupt vectors. Each 
one of the 256 possible interrupts has a 4-byte jump 
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vector reserved for it. Locations OFFFFFOH through 
OFFFFFFH are reserved for system initialization. 

Interrupts 

Many of the exceptions discussed in section Interrupts 
and Exceptions are not applicable to Real Mode 
operation; in particular, Exceptions 10, 11, and 14 do 
not occur in Real Mode. Other exceptions have slightly 
different meanings in Real Mode; Table 9 identifies 
these exceptions. 

Shutdown and Halt 

The HLT instruction stops program execution and 
prevents the proces sor fr om using the local bus until 
restarted. Either NMI, FLT, INTR with interrupts enabled 
(IF=1 ), or Reset will force the Am386SX/SXL micropro- 
cessor out of halt. If interrupted, the saved CS:IP will 
point to the next instruction after the HLT. 

Shutdown will occur when a severe error is detected 
that prevents further processing. In Real Mode, shut- 
down can occur under two conditions: 

1 . An interrupt or an exception occurs (Exceptions 8 or 
13) and the interrupt vector is larger than the 
Interrupt Descriptor Table. 

2. A Call, INT, or Push instruction attempts to wrap 
around the stack segment when SP is not even. 

An NMI input can bring the processor out of shutdown if 
the Interrupt Descriptor Table limit is large enough to 
contain the NMI interrupt vector (at least 000 FH) and the 
stack has enough room to contain the vector and flag in- 
formation (i.e., SP is greater than 0005H). Otherwise, 
shutdown can only be exited by a processor reset. 

LOCK Operation 

The LOCK prefix on the Am386SX/SXL microproces- 
sor, even in Real Mode, is more restrictive than on the 
80286. This is due to the addition of paging on the 
Am386SX/SXL CPU in Protected Mode and Virtual 
8086 Mode. The LOCK prefix is not supported during re- 
peat string instructions. 

The only instruction forms where the LOCK prefix is 
legal on the Am386SX/SXL microprocessor are shown 
in Table 10. 

Table 10. Legal Instructions for the LOCK Prefix 



Op-Code 


Operands 
(Dest, Source) 


BIT Test and 

SET/RESET/COMPLEMENT 


Mem, Reg/I mmed 


XCHG 


Reg, Mem 


XCHG 


Mem, Reg 


ADD, OR, ADC, SBB 
AND, SUB, XOR 


Mem, Reg/lmmed 


NOT, NEG, INC, DEC 


Mem 



An Exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or op-code not listed 
above. The LOCK prefix allows indivisible read/modify/ 
write operations on memory operands using the instruc- 
tions above. 

The LOCK prefix is not lOPL-sensitive on the 
Am386SX/SXL microprocessor. The LOCK prefix can 
be used at any privilege level, but only on the instruction 
forms listed in Table 10. 

PROTECTED MODE ARCHITECTURE 

The complete capabilities of the Am386SX/SXL micro- 
processor are unlocked when the processor operates in 
Protected Virtual Address Mode (Protected Mode). 
Protected Mode vastly increases the linear address 
space to 4 Gb (2 32 bytes), and allows the running of 
virtual memory programs of almost unlimited size (64 tb 
(2 46 bytes)). In addition, Protected Mode allows the 
Am386SX/SXL CPU to run all of the existing Am386DX/ 
DXL CPU (using only 16 Mb of physical memory), 
80286, and 8086 CPU's software, while providing a 
sophisticated memory management and a hardware- 
assisted protection mechanism. Protected Mode allows 
the use of additional instructions specially optimized for 
supporting multitasking operating systems. The base 
architecture of the Am386SX/SXL microprocessor 
remains the same; the registers, instructions, and 
addressing modes described in the previous sections 
are retained. The main difference between Protected 
Mode and Real Mode from a programmer's viewpoint is 
the increased address space and a different addressing 
mechanism. 

Addressing Mechanism 

Like Real Mode, Protected Mode uses two components 
to form the logical address: a 16-bit selector is used to 
determine the linear base address of a segment, the 
base address is added to a 32-bit effective address to 
form a 32-bit linear address. The linear address is then 
either used as a 24-bit physical address, or if paging is 
enabled, the paging mechanism maps the 32-bit linear 
address into a 24-bit physical address. 

The difference between the two modes lies in 
calculating the base address. In Protected Mode, the 
selector is used to specify an index into an operating 
system defined table (see Figure 8). The table contains 
the 32-bit base address of a given segment. The 
physical address is formed by adding the base address 
obtained from the table to the offset. 

Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the Am386SX/SXL microprocessor, as 
paging operates beneath segmentation. The page 
mechanism translates the protected linear address 
which comes from the segmentation unit into a physical 
address. Figure 9 shows the complete Am386SX/SXL 
CPU addressing mechanism with paging enabled. 
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Figure 7. Debug Registers 



Segmentation 

Segmentation is one method of memory management. 
It provides the basis for software protection and is used 
to encapsulate regions of memory that have common 
attributes. For example, all of the code of a given 
program could be contained in a segment, or an 
operating system table may reside in a segment. All 
information about each segment is stored in an 8-byte 
data structure called a descriptor. All of the descriptors 
in a system are contained in descriptor tables which are 
recognized by hardware. 

Terminology 

The following terms are used throughout the discussion 
of descriptors, privilege levels, and protection: 

PL: Privilege Level— One of the four hierarchical 
privilege levels. Level is the most privileged 
level and level 3 is the least privileged. 

RPL: Requestor Privilege Level— The privilege level 
of the original supplier of the selector. RPL is 
determined by the least two significant bits of a 
selector. 

DPL: Descriptor Privilege Level— This is the least 
privileged level at which a task may access that 
descriptor (and the segment associated with that 
descriptor). Descriptor Privilege Level is deter- 
mined by bits 6:5 in the Access Right Byte of a 
descriptor. 



CPL: Current Privilege Level — The privilege level at 
which a task is currently executing, which equals 
the privilege level of the code segment being 
executed. CPL can also be determined by 
examining the lowest 2 bits of the CS register, 
except for conforming code segments. 

EPL: Effective Privilege Level — The effective privilege 
level is the least privileged of the RPL and the 
DPL. EPL is the numerical maximum of RPL and 
DPL 

Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 

Descriptor Tables 

The descriptor tables define all of the segments which 
are used in an Am386SX/SXL microprocessor system. 
There are three types of tables which hold descriptors: 
the Global Descriptor Table, Local Descriptor Table, 
and Interrupt Descriptor Table. All of the tables are 
variable length memory arrays and can vary in size 
from 8 bytes to 64 Kb. Each table can hold up to 8192 
8-byte descriptors. The upper 13 bits of a selector are 
used as an index into the descriptor table. The tables 
have registers associated with them which hold the 
32-bit linear base address and the 16-bit limit of each 
fable. 
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Figure 8. Protected Mode Addressing 
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Figure 9. Paging and Segmentation 
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Each of the tables has a register associated with it: 
GDTR, LDTR, and IDTR (see Figure 1). The LGDT, 
LLDT, and LIDT instructions load the base and limit of 
the Global, Local, and Interrupt Descriptor Tables into 
the appropriate register. The SGDT, SLDT, and SIDT 
store the base and limit values. These are privileged 
instructions. 

Global Descriptor Table 

The Global Descriptor Table (GDT) contains descriptors 
which are available to all of the tasks in a system. The 
GDT can contain any type of segment descriptor except 
for interrupt and trap descriptors. Every Am386SX/SXL 
CPU system contains a GDT. 

The first slot of the Global Descriptor Table corresponds 
to the null selector and is not used. The null selector 
defines a null pointer value. 

Local Descriptor Table 

LDTs contain descriptors which are associated with a 
given task. Generally, operating systems are designed 
so that each task has a separate LDT. The LDT may 
contain only code, data, stack, task gate, and call gate 
descriptors. LDTs provide a mechanism for isolating a 
given task's code and data segments from the rest of the 
operating system, while the GDT contains descriptors 
for segments which are common to all tasks. A segment 
cannot be accessed by a task if its segment descriptor 
does not exist in either the current LDT or the GDT. This 
provides both isolation and protection for a task's seg- 
ments while still allowing global data to be shared 
among tasks. 

Unlike the 6-byte GDT or IDT registers which contain a 
base address and limit, the visible portion of the LDT 
register contains only a 16-bit selector. This selector 
refers to a Local Descriptor Table descriptor in the GDT 
(see Figure 1). 

Interrupt Descriptor Table 

The third table needed for Am386SX/SXL microproces- 
sor systems is the Interrupt Descriptor Table. The IDT 
contains the descriptors which point to the location of 
the up to 256 interrupt service routines. The IDT may 
contain only task gates, interrupt gates, and trap gates. 



The IDT should be at least 256 bytes in size in order to 
hold the descriptors for the 32 interrupts reserved for fu- 
ture use. Every interrupt used by a system must have an 
entry in the IDT. The IDT entries are referenced by INT 
instructions, external interrupt vectors, and exceptions. 

Descriptors 

The object to which the segment selector points to is 
called a descriptor. Descriptors are eight byte quantities 
which contain attributes about a given region of linear 
address space. These attributes include the 32-bit base 
linear address of the segment, the 20-bit length and 
granularity of the segment, the protection level, read, 
write, or execute privileges, the default size of the oper- 
ands (16 bit or 32 bit), and the type of segment. All of 
the attribute information about a segment is contained 
in 12 bits in the segment descriptor. Figure 11 shows 
the general format of a descriptor. All segments on the 
Am386SX/SXL microprocessor have three attribute 
fields in common: the P bit, the DPL bit, and the S bit. 
The P (Present) Bit is 1 if the segment is loaded in 
physical memory. If P = 0, then any attempt to access 
this segment causes a Not Present exception (number 
11). The Descriptor Privilege Level (DPL) is a two bit 
field which specifies the protection level, 0-3, 
associated with a segment. 

The Am386SX/SXL microprocessor has two main 
categories of segments: system segments and non- 
system segments (for code and data). The segment bit 
(S) determines if a given segment is a system segment 
or a code or data segment. If the S bit is 1, then the 
segment is either a code or data segment; if it is 0, then 
the segment is a system segment. 

Code and Data Descriptors (S=1) 

Figure 1 2 shows the general format of a code and data 
descriptor, and Table 1 1 illustrates how the bits in the 
Access Right Byte are interpreted. 

Code and data segments have several descriptor fields 
in common. The accessed bit (A) is set whenever 
the processor accesses a descriptor. The granularity 
bit (G) specifies if a segment length is byte-granular or 
page-granular. 
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Type Definition 

8 Invalid 

9 Available TSS 
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Figure 13. System Descriptors 
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Table 11. Access Rights Byte Definition for Code and Data Descriptors 



Bit 
Position 


Name 


Function 


7 

6-5 
4 


Present (P) 

Descriptor Privilege Levels (DPL) 
Segment Descriptor (S) 


P = 1 Segment is mapped into physical memory. 
P = No mapping to physical memory exists, Base and Limit are 
not used. 

Segment privilege attribute used in privilege tests. 

S = 1 Code or Data (includes stacks) Segment Descriptor. 
S = System Segment Descriptor or Gate Descriptor. 


3 
2 

1 


Executable (E) 
Expansion Direction (ED) 

Writeable (W) 


E = Descriptor type is data segment: 

ED = Expand up segment, offsets must be < limit. 
ED = 1 Expand down segment, offsets must be > limit. 

W = Data segment may not be written into. 
W= 1 Data segment may be written into. 


If Data 
Segment 
' (S-1, 
E = 0) 


3 
2 

1 


Executable (E) 
Conforming (C) 

Readable (R) 


E = 1 Descriptor type is code segment: 

C = 1 Code segment may only be executed when 
CPL>DPL and CPL remains unchanged. 

R = Code segment may not be read. 
R = 1 Code segment may be read. 


If Code 
Segment 
' (S-1. 
E-1) 





Accessed (A) 


A = Segment has not been accessed. 
A= 1 Segment selector has been loaded into segment register 
or used by selector test instructions. 
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System Descriptor Formats (S=0) 

System segments describe information about operating 
system tables, task, and gates. Figure 13 shows the 
general format of system segment descriptors, and the 
various types of system segments. Am386SX/SXL CPU 
system descriptors (which are the same as Am386DX/ 
DXL CPU system descriptors) contain a 32-bit base lin- 
ear address and a 20-bit segment limit. 80286 system 
descriptors have a 24-bit base address and a 16-bit 
segment limit. 80286 system descriptors are identified 
by the upper 1 6 bits being all zero. 

Differences Between Am386SX/SXL Microproces- 
sor and 80286 Descriptors 

In order to provide operating system compatibility with 
the 80286, the Am386SX/SXL CPU supports all of the 
80286 segment descriptors. The 80286 system 
segment descriptors contain a 24-bit base address and 
16-bit limit, while the Am386SX/SXL CPU system 
segment descriptors have a 32-bit base address, a 
20-bit limit field, and a granularity bit. The word count 
field specifies the number of 1 6-bit quantities to copy for 
80286 call gates and 32-bit quantities for Am386SX/ 
SXL CPU call gates. 

Selector Fields 

A selector in Protected Mode has three fields: Local or 
Global Descriptor Table Indicator (Tl), Descriptor Entry 
Index (Index), and Requestor (the selector's) Privilege 
Level (RPL), as shown in Figure 14. The Tl bit selects 
either the Global Descriptor Table or the Local 
Descriptor Table. The Index selects one of 8K descrip- 
tors in the appropriate descriptor table. The RPL bits 
allow high speed testing of the selector's privilege 
attributes. 



Segment Descriptor Cache 

In addition to the selector value, every segment register 
has a segment descriptor cache register associated 
with it. Whenever a segment register's contents are 
changed, the 8-byte descriptor associated with the 
selector is automatically loaded (cached) on the chip. 
Once loaded, all references to that segment use the 
cached descriptor information instead of reaccessing 
the descriptor. The contents of the descriptor cache are 
not visible to the programmer. Since descriptor caches 
only change when a segment register is changed, 
programs which modify the descriptor tables must 
reload the appropriate segment registers after changing 
a descriptor's value. 

Protection 

The Am386SX/SXL microprocessor has four levels of 
protection which are optimized to support a multitasking 
operating system and to isolate and protect user 
programs from each other and the operating system. 
The privilege levels control the use of privileged 
instructions, I/O instructions, and access to segments 
and segment descriptors. The Am386SX/SXL micro- 
processor also offers an additional type of protection on 
a page basis when paging is enabled. 



The four-level hierarchical privilege system is an 
extension of the user/supervisor privilege mode 
commonly used by minicomputers. The user/supervisor 
mode is fully supported by the Am386SX/SXL micropro- 
cessor paging mechanism. The Privilege Levels (PL) 
are numbered through 3. Level is the most privileged 
level. 
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Figure 14. Example Descriptor Selection 
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Table 12. Descriptor Types Used for Control Transfer 



Control Transfer Types 


Operation Types 


Descriptor 
Referenced 


Descriptor 
Table 


Intersegment within the same privilege level 


JMP, CALL, RET, IRET* 


Code Segment 


GDT/LDT 


Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 


CALL 


Call Gate 


GDT/LDT 


Interrupt Instruction, 
Exception, External 
Interrupt 


Trap or Interrupt 
Gate 


IDT 


Intersegment to a lower privilege level 
(changes task CPL) 


RET, IRET* 


Code Segment 


GDT/LDT 




CALL, JMP 


Task State 
Segment 


GDT 


Task Switch 


CALL, JMP 


Task Gate 


GDT/LDT 


IRET** 

Interrupt Instruction, 

Exception, External 

Interrupt 


Task Gate 


IDT 



*NT (Nested Task bit of flag register) = 
**NT (Nested Task bit of flag register) = 1 



Rules of Privilege 

The Am386SX/SXL microprocessor controls access to 
both data and procedures between levels of a task, 
according to the following rules: 

— Data stored in a segment with privilege level p can be 
accessed only by code executing at a privilege level at 
least as privileged as p. 

— A code segment/procedure with privilege level p can 
only be called by a task executing at the same or 
lesser privilege level than p. 

Privilege Levels 

At any point in time, a task on the Am386SX/SXL micro- 
processor always executes at one of the four privilege 
levels. The Current Privilege Level (CPL) specifies what 
the task's privilege level is. A task's CPL may only be 
changed by control transfers through gate descriptors to 
a code segment with a different privilege level. Thus, an 
application program running at PL = 3 may call an 
operating system routine at PL = 1 (via a gate) which 
would cause the task's CPL to be set to 1 until the 
operating system routine was finished. 

Selector Privilege (RPL) 

The privilege level of a selector is specified by the RPL 
field. The selector's RPL is only used to establish a less 
trusted privilege level than the current privilege level of 
the task for the use of a segment. This level is called the 
task's Effective Privilege Level (EPL). The EPL is 
defined as being the least privileged (numerically larger) 
level of a task's CPL and a selector's RPL. The RPL is 
most commonly used to verify that pointers passed to an 
operating system procedure do not access data that is 



of higher privilege than the procedure that originated the 
pointer. Since the originator of a selector can specify 
any RPL value, the Adjust RPL (ARPL) instruction is 
provided to force the RPL bits to the originator's CPL. 

I/O Privilege 

The I/O Privilege Level (IOPL) lets the operating system 
code executing at CPL = define the least privileged 
level at which I/O instructions can be used. An 
Exception 13 (General Protection Violation) is gen- 
erated if an I/O instruction is attempted when the CPL of 
the task is less privileged then the IOPL. The IOPL is 
stored in bits 13 and 14 of the EFLAGS register. The 
following instructions cause an Exception 13 if the CPL 
is greater than IOPL: IN, INS, OUT, OUTS, STI, CLI, 
and LOCK prefix. 

Descriptor Access 

There are basically two types of segment accesses: 
those involving code segments such as control trans- 
fers, and those involving data accesses. Determining 
the ability of a task to access a segment involves the 
type of segment to be accessed, the instruction used, 
the type of descriptor used, and CPL, RPL, and DPL as 
described above. 

Any time an instruction loads a data segment register 
(DS, ES, FS, GS) the Am386SX/SXL CPU makes pro- 
tection validation checks. Selectors loaded in the DS, 
ES, FS, GS registers must refer only to data segment or 
readable code segments. 

Finally, the privilege validation checks are performed. 
The CPL is compared to the EPL and if the EPL is more 
privileged than the CPL, an Exception 13 (General 
Protection Fault) is generated. 
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Figure 16. Sample I/O Permission Bit Map 



The rules regarding the stack segment are slightly differ- 
ent than those involving data segments. Instructions 
that load selectors into SS must refer to data segment 
descriptors for writeable data segments. The DPL and 
RPL must equal the CPL of all other descriptor types or a 
privilege level violation will cause an Exception 13. A 
stack not present fault causes an Exception 12. 

Privilege Level Transfers 

Inter-segment control transfers occur when a selector is 
loaded in the CS register. For a typical system most of 
these transfers are simply the result of a call or a jump to 
another routine. There are five types of control transfers 
which are summarized in Table 12. Many of these 
transfers result in a privilege level transfer. Changing 
privilege levels is done only by control transfers, using 
gates, task switches, and interrupt or trap gates. 

Control transfers can only occur if the operation which 
loaded the selector references the correct descriptor 
type. Any violation of these descriptor usage rules will 
cause an Exception 13. 

CALL Gates 

Gates provide protected indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can ensure 
that all gates only allow entry into a few trusted 
procedures. 

Task Switching 

Avery important attribute of any multitasking/multi-user 
operating system is its ability to rapidly switch between 
tasks or processes. The Am386SX/SXL microproces- 
sor directly supports this operation by providing a task 
switch instruction in hardware. The task switch oper- 
ation saves the entire state of the machine (all of the 
registers, address space, and a link to the previous 
task), loads a new execution state, performs protection 
checks, and commences execution in the new task. Like 
transfer of control by gates, the task switch operation is 
invoked by executing an intersegment JMP or CALL 
instruction which refers to a Task State Segment (TSS), 
or a task gate descriptor in the GDT or LDT. An INT n 
instruction, exception, trap, or external interrupt may 



also invoke the task switch operation if there is a task 
gate descriptor in the associated IDT descriptor slot. 

The TSS descriptor points to a segment (see Figure 1 5) 
containing the entire execution state. A task gate 
descriptor contains a TSS selector. The Am386SX/SXL 
microprocessor supports both 80286 and Am386SX/ 
SXL CPU TSSs. The limit of an Am386SX/SXL CPU 
TSS must be greater than 64H (2BH for a 80286 TSS), 
and can be as large as 16 Mb. In the additional TSS 
space, the operating system is free to store additional 
information such as the reason the task is inactive, the 
time the task has spent running, or open files belonging 
to the task. 

Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
Am386SX/SXL microprocessor called the Task State 
Segment Register (TR). This register contains a 
selector referring to the task state segment descriptor 
that defines the current TSS. A hidden base and limit 
register associated with TSS descriptor are loaded 
whenever TR is loaded with a new selector. Returning 
from a task is accomplished by the I RET instruction. 
When IRET is executed, control is returned to the task 
which was interrupted. The currently executing task's 
state is saved in the TSS and the old task state is 
restored from its TSS. 

Several bits in the flag register and machine status word 
(CRO) give information about the state of a task which is 
useful to the operating system. The Nested Task bit 
(NT) controls the function of the IRET instruction. If 
NT = 0, the IRET instruction performs the regular return. 
If NT = 1,1 RET performs a task switch operation base to 
the previous task. The NT bit is set or reset in the 
following fashion: 

When a CALL or INT instruction initiates a task 
switch, the new TSS will be marked busy and the 
back link field of the new TSS set to the old TSS 
selector. The NT bit of the new task is set by CALL 
or INT initiated task switches. An interrupt that 
does not cause a task switch will clear NT (the NT 
bit will be restored after execution of the interrupt 
handler). NT may also be set or cleared by POPF 
or IRET instructions. 
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The Am386SX/SXL microprocessor task state seg- 
ment is marked busy by changing the descriptor type 
field from Type 9 to Type OBH. An 80286 TSS is marked 
busy by changing the descriptor type field from Type 1 
to Type 3. Use of a selector that references a busy task 
state segment causes an Exception 13. 

The VM (Virtual Mode) bit is used to indicate if a task is a 
Virtual 8086 task. If VM = 1 then the tasks will use the 
Real Mode addressing mechanism. The Virtual 8086 
environment is only entered and exited by a task switch. 

The coprocessor's state is not automatically saved 
when a task switch occurs. The Task Switched Bit (TS) 
in the CRO register helps deal with the coprocessor's 
state in a multitasking environment. Whenever the 
Am386SX/SXL microprocessor switches tasks, it sets 
the TS bit. The Am386SX/SXL CPU detects the first use 
of a processor extension instruction after a task switch 
and causes the processor extension Not Available 
Exception 7. The exception handler for Exception 7 
may then decide whether to save the state of the 
coprocessor. 

The T bit in the Am386SX/SXL microprocessor TSS 
indicates that the processor should generate a debug 
exception when switching to a task. If T = 1, then 
upon entry to a new task a debug Exception 1 will be 
generated. 

Initialization and Transition To Protected Mode 

Since the Am386SX/SXL microprocessor begins 
executing in Real Mode immediately after RESET, it is 
necessary to initialize the system tables and registers 
with the appropriate values. The GDT and IDT registers 
must refer to a valid GDT and IDT. The IDT should be at 
least 256 bytes long, and the GDT must contain 
descriptors for the initial code and data segments. 

Protected Mode is enabled by loading CRO with PE bit 
set. This can be accomplished by using the MOV CRO, 
R/M instruction. After enabling Protected Mode, the 
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next instruction should execute an intersegment JMP 
to load the CS register and flush the instruction decode 
queue. The final step is to load all of the data segment 
registers with the initial selector values. 

An alternate approach to entering Protected Mode is to 
use the built in task-switch to load all of the registers. In 
this case the GDT would contain two TSS descriptors in 
addition to the code and data descriptors needed for the 
first task. The first JMP instruction in Protected Mode 
would jump to the TSS causing a task switch and load- 
ing all of the registers with the values stored in the TSS. 
The Task State Segment Register should be initialized 
to point to a valid TSS descriptor. 

Paging 

Paging is another type of memory management useful 
for virtual memory multitasking operating systems. Un- 
like segmentation, which modularizes programs and 
data into variable length segments, paging divides pro- 
grams into multiple uniform size pages. Pages bear no 
direct relation to the logical structure of a program. 
While segment selectors can be considered the logical 
name of a program module or data structure, a page 
most likely corresponds to only a portion of a module or 
data structure. 

Page Organization 

The Am386SX/SXL microprocessor uses two levels of 
tables to translate the linear address (from the segmen- 
tation unit) into a physical address. There are three 
components to the paging mechanism of the Am386SX/ 
SXL CPU: the Page Directory, the Page Tables, and the 
page itself (Page Frame). All memory-resident ele- 
ments of the Am386SX/SXL microprocessor paging 
mechanism are the same size, namely 4 Kb. A uniform 
size for all of the elements simplifies memory allocation 
and reallocation schemes, since there is no problem 
with memory fragmentation. Figure 17 shows how the 
paging mechanism works. 
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Figure 18. Page Directory Entry (Points to Page Table) 
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Figure 19. Page Table Entry (Points to Page) 



15022B-038 



Page Fault Register 

CR2 is the Page Fault Linear Address register. It holds 
the 32-bit linear address which caused the last Page 
Fault detected. 

Page Descriptor Base Register 

CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of the 
Page Directory (this value is truncated to a 24-bit value 
associated with the Am386SX/SXL CPU's 16-Mb 
physical memory limitation). The lower 12 bits of CR3 
are always zero to ensure that the Page Directory is 
always page aligned. Loading it with a MOV CR3, reg 
instruction causes the Page Table entry cache to be 
flushed, as will a task switch through a TSS which 
changes the value of CRO. 

Page Directory 

The Page Directory is 4-Kb long and allows up to 1 024 
Page Directory entries. Each Page Directory entry 
contains information about the Page Table and the 
address of the next level of tables, the Page Tables. The 
contents of a Page Directory entry are shown in Figure 

18. The upper 10 bits of the linear address (A31-A22) 
are used as an index to select the correct Page Directory 
entry. 

The Page Table address contains the upper 20 bits of a 
32-bit physical address that is used as the base address 
for the next set of tables, the Page Tables. The lower 
12 bits of the Page Table addresses appear on 4-Kb 
boundaries. For an Am386DX/DXL CPU system, the 
upper 20 bits will select one of 2 20 Page Tables, but for 
an Am386SX/SXL microprocessor system, the upper 
20 bits only select one of 2 12 Page Tables. Again, this is 
because the Am386SX/SXL CPU is limited to a 24-bit 
physical address, and the upper 8 bits (A31-A24) are 
truncated when the address is output on its 24 address 
pins. 

Page Tables 

Each Page Table is 4-Kb long and allows up to 1024 
Page Table entries. Each Page Table entry contains in- 
formation about the Page Frame and its address. The 
contents of a Page Table entry are shown in Figure 

19. The middle 1 bits of the linear address (A21-A12) 



are used as an index to select the correct Page Table 
entry. 

The Page Frame address contains the upper 20 bits of 
a 32-bit physical address which is used as the base 
address for the Page Frame. The lower 12 bits of the 
Page Frame address are zero so that the Page Frame 
addresses appear on 4-Kb boundaries. For an 
Am386DX/DXL CPU system, the upper 20 bits will se- 
lect one of 2 20 Page Frames, but for an Am386SX/ 
SXL microprocessor system, the upper 20 bits only 
select one of 2 12 Page Frames. Again, this is because 
the Am386SX/SXL CPU is limited to a 24-bit physical 
address space, and the upper 8 bits (A31-A24) are 
truncated when the address is output on its 24 address 
pins. 

Page Directory/Table Entries 

The lower 1 2 bits of the Page Table entries and Page Di- 
rectory entries contain statistical information about 
pages and Page Tables, respectively. The P (Present) 
bit indicates if a Page Directory or Page Table entry can 
be used in address translation. If P = 1 , the entry can be 
used for address translation. If P = 0, the entry cannot 
be used for translation. All of the other bits, are available 
for use by the software. For example, the remaining 31 
bits could be used to indicate where on disk the page is 
stored. 

The A (Accessed) bit is set by the Am386SX/SXL CPU 
for both types of entries before a read or write access 
occurs to an address covered by the entry. The D (Dirty) 
bit is set to 1 before a write to an address covered by that 
Page Table entry occurs. The D bit is undefined for Page 
Directory entries. When the P, A, and D bits are updated 
by the Am386SX/SXL CPU, the processor generates a 
Read-Modify-Write cycle which locks the bus and pre- 
vents conflicts with other processors or peripherals. 
Software which modifies these bits should use the 
LOCK prefix to ensure the integrity of the Page Tables in 
multi-master systems. 

The 3 bits marked system software definable (in Figures 
18 and 19) are software definable. System software 
writers are free to use these bits for whatever purpose 
they wish. 
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Page Level Protection (R/W, U/S Bits) 

The Am386SX/SXL microprocessor provides a set of 
protection attributes for paging systems. The paging 
mechanism distinguishes between two levels of 
protection: User, which corresponds to level 3 of the 
segmentation based protection; and Supervisor, which 
encompasses all of the other protection levels (0, 1 , 
and 2). Programs executing at Level 0, 1 , or 2 bypass 
the page protection, although segmentation-based 
protection is still enforced by the hardware. 

The U/S and R/W bits are used to provide User/ 
Supervisor and Read/Write protection for individual 
pages, or for all pages covered by a Page Table 
Directory entry. The U/S and R/W bits in the second 
level Page Table entry apply only to the page described 
by that entry. The U/S and R/W bits in the first level Page 
Directory Table apply to all pages described by the Page 
Table pointed to by that directory entry. The U/S and 
R/W bits for a given page are obtained by taking the 
most restrictive of the U/S and R/W bits from the Page 
Directory Table entries and using these bits to address 
the page. 

Translation Look-Aside Buffer 

The Am386SX/SXL microprocessor paging hardware is 
designed to support demand paged virtual memory 
systems. However, performance would degrade 
substantially if the processor was required to access two 
levels of tables for every memory reference. To solve 
this problem, the Am386SX/SXL CPU keeps a cache of 
the most recently accessed pages; this cache is called 
the Translation Look- Aside Buffer (TLB). The TLB is 
a four-way set associative 32-entry Page Table cache. 
It automatically keeps the most commonly used Page 
Table entries in the processor. The 32-entry TLB 
coupled with a 4K page size results in coverage of 128 
Kb of memory addresses. For many common multitask- 
ing systems, the TLB will have a hit rate of greater than 
98%. This means that the processor will only have to 
access the two-level page structure for less than 2% of 
all memory references. 

Paging Operation 

The paging hardware operates in the following fashion. 
The paging unit hardware receives a 32-bit linear 
address from the segmentation unit. The upper 20 linear 
address bits are compared with all 32 entries in the TLB 
to determine if there is a match. If there is a match (i.e., a 
TLB hit), then the 24-bit physical address is calculated 
and is placed on the address bus. 

If the Page Table entry is not in the TLB, the Am386SX/ 
SXL microprocessor will read the appropriate Page 
Directory entry. If P = 1 on the Page Directory entry, indi- 
cating that the Page Table is in memory, then the 
Am386SX/SXL CPU will read the appropriate Page 
Table entry and set the Access bit. If P = 1 on the 
Page Table entry, indicating that the page is in memory, 
the Am386SX/SXL microprocessor will update the 
Access and Dirty bits as needed and fetch the operand. 
The upper 20 bits of the linear address, read from the 



Page Table, will be stored in the TLB for future 
accesses. If P = for either the Page Directory entry or 
the Page Table entry, then the processor will generate a 
Page Fault (Exception 14). 



The processor will also generate a Page Fault 
(Exception 14) if the memory reference violated the 
page protection attributes. CR2 will hold the linear 
address which caused the Page Fault. Since Exception 
14 is classified as a fault, CS:EIP will point to the 
instruction causing the Page Fault. The 16-bit error 
code, pushed as part of the Page Fault handler, will 
contain status bits which indicate the cause of the Page 
Fault. 

The 1 6-bit error code is used by the operating system to 
determine how to handle the Page Fault. Figure 20 
shows the format of the Page Fault error code and the 
interpretation of the bits. Even though the bits in the 
error code (U/S, W/R, and P) have similar names as the 
bits in the Page Directory/Table Entries, the interpreta- 
tion of the error code bits is different. Figure 21 indicates 
what type of access caused the Page Fault. 

U/S: The U/S bit indicates whether the access causing 
the fault occurred when the processor was executing in 
User Mode (U/S = 1) or in Supervisor mode (U/S = 0). 

W/R: The W/R bit indicates whether the access causing 
the fault was a Read (W/R = 0) or a Write (W/R = 1). 

P: The P bit indicates whether a Page Fault was caused 
by a not-present page (P = 0), or by a page level protec- 
tion violation (P=1). 

U = Undefined 
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Figure 20. Page Fault Error Code Format 
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Figure 21. Type of Access Causing Page Fault 



Operating System Responsibilities 

When the operating system enters or exits paging mode 
(by setting or resetting bit 31 in the CR0 register), a 
short JM P must be executed to flush the Am386SX/SXL 
microprocessor's prefetch queue. This ensures that all 
instructions executed after the address mode change 
will generate correct addresses. 

The Am386SX/SXL microprocessor takes care of the 
page address translation process, relieving the burden 
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from an operating system in a demand-paged system. 
The operating system is responsible for setting up the 
initial Page Tables and handling any Page Faults. The 
operating system is also required to invalidate (i.e., 
flush) the TLB when any changes are made to any of the 
Page Table entries. The operating system must reload 
CR3 to cause the TLB to be flushed. 

Setting up the tables is simply a matter of loading CR3 
with the address of the Page Directory, and allocating 
space for the Page Directory and the Page Tables. The 
primary responsibility of the operating system is to 
implement a swapping policy and handle all of the 
Page Faults. 

A final concern of the operating system is to ensure that 
the TLB cache matches the information in the paging 
tables. In particular, anytime the operating systems sets 
the P (Present) bit of Page Table entry to zero, the TLB 
must be flushed by reloading CR3. Operating systems 
may want to take advantage of the fact that CR3 is 
stored as part of a TSS, to give every task or group of 
tasks its own set of Page Tables. 

Virtual 8086 Environment 

The Am386SX/SXL microprocessor allows the execu- 
tion of 8086 application programs in both Real Mode 
and in Virtual 8086 Mode. The Virtual 8086 Mode allows 
the execution of 8086 applications, while still allowing 
the system designer to take full advantage of the 
Am386SX/SXL CPU's protection mechanism. 

Virtual 8086 Addressing Mechanism 

One of the major differences between Am386SX/SXL 
CPU Real and Protected modes is how the segment 
selectors are interpreted. When the processor is 
executing in Virtual 8086 Mode, the segment registers 
are used in a fashion identical to Real Mode. The 
contents of the segment register are shifted left four 
bits and added to the offset to form the segment base 
linear address. 

The Am386SX/SXL microprocessor allows the oper- 
ating system to specify which programs use the 8086 
address mechanism and which programs use Protected 
Mode addressing on a per task basis. Through the use 
of paging, the 1-Mb address space of the Virtual Mode 
task can be mapped to anywhere in the 4-Gb linear 
address space of the Am386SX/SXL CPU. Like Real 
Mode, Virtual Mode addresses that exceed 1 Mb will 
cause an Exception 13. However, these restrictions 
should not prove to be important, because most tasks 
running in Virtual 8086 Mode will simply be existing 
8086 application programs. 

Paging in Virtual Mode 

The paging hardware allows the concurrent running of 
multiple Virtual Mode tasks, and provides protection and 
operating system isolation. Although it is not strictly 
necessary to have the paging hardware enabled to run 
Virtual Mode tasks, it is needed in order to run multiple 
Virtual Mode tasks or to relocate the address space of a 



Virtual Mode task to physical address space greater 
than 1 Mb. 

The paging hardware allows the 20-bit linear address 
produced by a Virtual Mode program to be divided into 
as many as 256 pages. Each one of the pages can be 
located anywhere within the maximum 16-Mb physical 
address space of the Am386SX/SXL microprocessor. In 
addition, since CR3 (the Page Directory Base Register) 
is loaded by a task switch, each Virtual Mode task can 
use a different mapping scheme to map pages to 
different physical locations. Finally, the paging 
hardware allows the sharing of the 8086 operating 
system code between multiple 8086 applications. 

Protection and I/O Permission Bit Map 

All Virtual Mode programs execute at privilege level 3. 
As such, Virtual Mode programs are subject to all of the 
protection checks defined in Protected Mode. This 
is different from Real Mode, which implicitly is executing 
at privilege level 0. Thus, an attempt to execute a 
privileged instruction in Virtual Mode will cause an 
Exception 13 fault. 

The following are privileged instructions, which may be 
executed only at Privilege level 0. Attempting to execute 
these instructions in Virtual 8086 Mode (or anytime 
CPL> 0) causes an Exception 13 fault: 



LIDT; 


MOV 


DRn, 


REG; 


MOV 


reg 


DRn 


LGDT; 


MOV 


TRn, 


reg; 


MOV 


reg 


TRn 


LMSW; 


MOV 


CRn 


reg; 


MOV 


reg 


CRn 


CLTS ; 














HLT; 















Several instructions, particularly those applying to the 
multitasking and the protection model, are available 
only in Protected Mode. Therefore, attempting to exe- 
cute the following instructions in Real Mode or in Virtual 
8086 Mode generates an Exception 6 fault: 

LTR; STR; 

LLDT; SLDT 

LAR; VERR 

LSL; VERW 
ARPL ; 

The instructions which are IOPL sensitive in Protected 
Mode are: 

IN; STI; 

OUT; CLI 

INS; 
OUTS ; 
REP INS; 
REP OUTS; 

In Virtual 8086 Mode the following instructions are IOPL 
sensitive: 



INT n; 
PUSHF; 
POPF; 



STI; 
CLI; 
IRET; 
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The PUSHF, POPF, and IRET instructions are IOPL 
sensitive in Virtual 8086 Mode only. This provision 
allows the IF flag to be virtualized to the virtual 8086 
Mode program. The INT n software interrupt instruction 
is also IOPL sensitive in Virtual 8086 Mode. Note that 
the INT 3, INTO, and BOUND instructions are not IOPL 
sensitive in Virtual 8086 Mode. 

The I/O instructions that directly refer to addresses in 
the processor's I/O space are IN, INS, OUT, and OUTS. 
The Am386SX/SXL microprocessor has the ability to 
selectively trap references to specific I/O addresses. 
The structure that enables selective trapping is the I/O 
Permission Bit Map in the TSS segment (see Figures 1 5 
and 1 6). The I/O permission map is a bit vector. The size 
of the map and its location in the TSS segment are 
variable. The processor locates the I/O permission map 
by means of the I/O map base field in the fixed portion of 
the TSS. The I/O map base field is 16-bits wide and 
contains the offset of the beginning of the I/O permission 
map. 

In protected mode, when an I/O instruction (IN, INS, 
OUT, or OUTS) is encountered, the processor first 
checks whether CPL <, IOPL. If this condition is true, the 
I/O operation may proceed. If not true, the processor 
checks the I/O permission map (in Virtual 8086 Mode, 
the processor consults the map without regard for the 
IOPL). 

Each bit in the map corresponds to an I/O port byte 
address; for example, the bit for port 41 is found at I/O 
map base +5, bit offset 1 . The processor tests all the bits 
that correspond to the I/O addresses spanned by an I/O 
operation; for example, a Dword operation tests four 
bits corresponding to four adjacent byte addresses. If 
any tested bit is set, the processor signals a general 
protection exception. If all the tested bits are zero, the 
I/O operations may proceed. 

It is not necessary for the I/O permission map to 
represent all the I/O addresses. I/O addresses not 
spanned by the map are treated as if they had one-bits in 
the map. The I/O map base should be at least one byte 
less than the TSS limit; the last byte beyond the I/O 
mapping information must contain all 1s. 

Because the I/O permission map is in the TSS segment, 
different tasks can have different maps. Thus, the 
operating system can allocate ports to a task by 
changing the I/O permission map in the task's TSS. 

Important Implementation Note: Beyond the last byte 
of I/O mapping information in the I/O permission bit map 
must be a byte containing all 1 s. The byte of all 1 s must 
be within the limit of the Am386SX/SXL CPU TSS 
segment (see Figure 15). 

Interrupt Handling 

In order to fully support the emulation of an 8086 
machine, interrupts in Virtual 8086 Mode are handled in 
a unique fashion. When running in Virtual Mode all 
interrupts and exceptions involve a privilege change 
back to the host Am386SX/SXL microprocessor 



operating system. The Am386SX/SXL CPU operating 
system deter-mines if the interrupt comes from a 
Protected Mode application, or from a Virtual Mode 
program, by examining the VM bit in the EFLAGS image 
stored on the stack. 

When a Virtual Mode program is interrupted, and 
execution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in the 
EFLAGS image on the stack. 

The Am386SX/SXL microprocessor operating system 
in turn handles the exception or interrupt and then 
returns control to the 8086 program. The Am386SX/ 
SXL microprocessor operating system may choose to 
let the 8086 operating system handle the interrupt, or it 
may emulate the function of the interrupt handler. For 
example, many 8086 operating system calls are 
accessed by PUSHing parameters on the stack, and 
then executing an INT n instruction. If the IOPL is set to 
0, then all INT n instructions will be intercepted by the 
Am386SX/SXL CPU operating system. 

An Am386SX/SXL microprocessor operating system 
can provide a Virtual 8086 environment which is totally 
transparent to the application software by intercepting 
and then emulating 8086 operating system's calls, and 
intercepting IN and OUT instructions. 

Entering and Leaving Virtual 8086 Mode 

Virtual 8086 Mode is entered by executing a 32-bit IRET 
instruction at CPL = 0, where the stack has a 1 in the VM 
bit of its EFLAGS image, or a Task Switch (at any CPL) 
to an Am386SX/SXL microprocessor task whose 
Am386SX/SXL CPU TSS has an EFLAGS image 
containing a 1 in the VM bit position, while the processor 
is executing in the Protected Mode. POPF does not 
affect the VM bit, but a PUSHF always pushes a in the 
VM bit. 

The transition out of Virtual 8086 Mode to Protected 
Mode occurs only on receipt of an interrupt or exception. 
In Virtual 8086 Mode, all interrupts and exceptions 
vector through the Protected Mode IDT, and enter an 
interrupt handler in Protected Mode. As part of the 
interrupt processing the VM bit is cleared. 

Because the matching IRET must occur from Level 0, 
Interrupt or Trap Gates used to field an interrupt or 
exception out of Virtual 8086 Mode must perform an 
inter-level interrupt only to Level 0. Interrupt or Trap 
Gates through conforming segments, or through 
segments with DPL > 0, will raise a GP fault with the CS 
selector as the error code. 

Task Switches To/From Virtual 8086 Mode 

Tasks which can execute in Virtual 8086 Mode must be 
described by a TSS with the Am386SX/SXL CPU for- 
mat (Type 9 or 11 descriptor). A task switch out of 
Virtual 8086 Mode will operate exactly the same as any 
other task switch out of a task with an Am386SX/SXL 
CPU TSS. All of the programmer visible state, including 
the EFLAGS register with the VM bit set to 1 , is stored in 
the TSS. The segment registers in the TSS will contain 
8086 segment base values rather than selectors. 
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A task switch into a task described by an Am386SX/SXL 
CPU TSS will have an additional check to determine if 
the incoming task should be resumed in Virtual 8086 
Mode. Tasks described by 80286 format TSSs cannot 
be resumed in Virtual 8086 Mode, so no check is re- 
quired there (the FLAGS image in 80286 format TSS 
has only the low-order 16 FLAGS bits). Before loading 
the segment register images from an Am386SX/SXL 
CPU TSS, the FLAGS image is loaded, so that the 
segment registers are loaded from the TSS image as 
8086 segment base values. The task is now ready to 
resume in Virtual 8086 Mode. 

Transitions Through Trap and interrupt Gates, and 
IRET 

A task switch is one way to enter or exit Virtual 8086 
Mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and to 
enter as part of executing an IRET instruction. The 
transition out must use an Am386SX/SXL CPU Trap 
Gate (Type 14), or Am386SX/SXL CPU Interrupt Gate 
(Type 15), which must point to a non-conforming Level 
segment (DPL = 0) in order to permit the trap handler to 
IRET back to the Virtual 8086 program. The Gate must 
point to a non-conforming Level segment to perform a 
level switch to Level so that the matching IRET can 
change the VM bit. Am386SX/SXL CPU gates must be 
used since 80286 gates save only the lower 16 bits of 
the EFLAGS register (the VM bit will not be saved) . Also, 
the 16-bit IRET used to terminate the 80286 interrupt 
handler will pop only the lower 1 6 bits from FLAGS, and 
will not affect the VM bit. The action taken for an 
Am386SX/SXL CPU Trap or Interrupt gate, if an 
interrupt occurs while the task is executing in Virtual 
8086 Mode, is given by the following sequence: 

1 . Save the FLAGS register in a temp to push later. 
Turn off the VM, TF, and IF bits. 

2. Interrupt and Trap gates must perform a level switch 
from 3 (where the Virtual 8086 Mode program 
executes) to (so IRET can return). 

3. Push the 8086 segment register values onto the new 
stack, in this order: GS, FS, DS, and ES. These are 
pushed as 32-bit quantities. Then load these 4 
registers with null selectors (0). 

4. Push the old 8086 stack pointer onto the new stack 
by pushing the SS register (as 32 bits), then pushing 
the 32-bit ESP register saved above. 

5. Push the 32-bit EFLAGS register saved in step 1 . 

6. Push the old 8086 instruction onto the new stack by 
pushing the CS register (as 32 bits), then pushing the 
32-bit EIP register. 

7. Load up the new CS:EIP value from the interrupt 
gate, and begin execution of the interrupt routine in 
protected mode. 

The transition out of Virtual 8086 Mode performs a level 
change and stack switch, in addition to changing back to 
protected mode. Also, all of the 8086 segment register 
images are stored on the stack (behind the SS:ESP 



image), and then loaded with null (0) selectors before 
entering the interrupt handler. This will permit the 
handler to safely save and restore the DS, ES, FS, and 
GS registers as 80286 selectors. This is needed so that 
interrupt handlers, which do not care about the mode of 
the interrupted program, can use the same prologue 
and epilogue code for state saving, regardless of 
whether or not a native mode or Virtual 8086 Mode 
program was interrupted. Restoring null selectors to 
these registers before executing the IRET will cause a 
trap in the interrupt handler. Interrupt routines which 
expect or return values in the segment registers will 
have to dbtain/return values from the 8086 register 
images pushed onto the new stack. They will need 
to know the mode of the interrupted program in order to 
know where to find/return segment registers, and also 
to know how to interpret segment register values. 

The IRET instruction will perform the inverse of the 
above sequence. Only the extended IRET instruction 
(operand size = 32) can be used, and must be executed 
at Level 0, to change the VM bit to 1 . 

1 . If the NT bit in the FLAGS register is On, an intertask 
return is performed. The current state is stored in the 
current TSS, and the link field in the current TSS is 
used to locate the TSS for the interrupted task which 
is to be resumed. Otherwise, continue with the 
following sequence. 

2. Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value active 
in the interrupted routine. 

3. Pop off the instruction pointer CS:EIP. EIP is pop- 
ped first, then a 32-bit word is popped which contains 
the CS value in the lower 16 bits. If VM = 0, this CS 
load is done as a protected mode segment load. If 
VM = 1 , this will be done as an 8086 segment load. 

4. Increment the ESP register by 4 to bypass the 
FLAGS image which was popped in step 1 . 

5. If VM = 1, load segment registers ES, DS, FS, and 
GS from memory locations SS:[ESP + 8], SS:[ESP + 
12], SS:[ESP + 1 6], and SS:[ESP = 20], respectively, 
where the new value of ESP stored in step 4 is used. 
Since VM = 1, these are done as 8086 segment 
register loads. 

Else if VM = 0, check that the selectors in ES, DS, 
FS, and GS are valid in the interrupted routines. Null 
out invalid selectors to trap, if an attempt is made to 
access through them. 

6. If RPL (CS) > CPL, pop the stack pointer SS:ESP 
from the stack. The ESP register is popped first, 
followed by 32 bits containing SS in the lower 1 6 
bits. If VM = 0, SS is loaded as a protected mode 
segment register load. If VM = 1 , an 8086 segment 
register load is used. 

7. Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine's stack image in step 1 ) determines 
whether the processor resumes the interrupted 
routine in Protected Mode or Virtual 8086 Mode. 
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FUNCTIONAL DATA 

The Am386SX/SXL microprocessor features a straight- 
forward functional interface to the external hardware. 
The Am386SX/SXL CPU has separate parallel buses 
for data and address. The data bus is 16-bits in width, 
and bidirectional. The address bus outputs 24-bit 
address values using 23 address lines and two Byte 
Enable signals. 

The Am386SX/SXL microprocessor has two selectable 
address bus cycles: address pipelined and non-address 
pipelined. The address pipelining option allows as much 
time as possible for data access by starting the pending 
bus cycle before the present bus cycle is finished. A 
non-pipelined bus cycle gives the highest bus 
performance by executing every bus cycle in two 
processor CLK cycles. For maximum design flexibility, 
the address pipelining option is selectable on a 
cycle-by-cycle basis. 

The processor's bus cycle is the basic mechanism for 
information transfer, either from system to processor, or 
from processor to system. The Am386SX/SXL micro- 
processor bus cycles perform data transfer in a 
minimum of only two clock periods. The maximum 
transfer band-width at 16 MHz is therefore 16 Mb/s. 
However, any bus cycle will be extended for more than 
two clock periods if external hardware withholds ac- 
knowledgment of the cycle. 

The Am386SX/SXL microprocessor can relinquish 
control of its local buses to allow mastership by other 
devices, such as Direct Memory Access (DMA) 
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channels. When relinquished, HLDA is the only output 
pin driven by the Am386SX/SXL microprocessor, 
providing near complete isolation of the processor from 
its system (all other output pins are in a float condition). 

Signal Description Overview 

Below is a brief description of the Am386SX/SXL micro- 
processor input and output signals arranged by 
functional groups. 

Example signal: M/To— High voltage indicates memory 
selected 
— Low voltage indicates I/O 
selected 

The signal descriptions sometimes refer to Switching 
timing parameters, such as t25 Reset Setup Time and 
t26 Reset Hold Time. The values of these parameters 
can be found in the Switching Characteristics table. 

Clock (CLK2) 

CLK2 provides the fundamental timing for the 
Am386SX/SXL microprocessor. It is divided by two in- 
ternally to generate the internal processor clock used 
for instruction execution. The internal clock is comprised 
of two phases, phase one and phase two. Each CLK2 
period is a phase of the internal clock. Figure 23 
illustrates the relationship. If desired, the phase of the 
internal processor clock can be synchronized to a 
known phase by ensuring the falling edge of the RESET 
signal meets the applicable setup and hold times, t25 
and t26. 
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Data Bus (D15-D0) 

These three-state, bidirectional signals provide the 
general purpose data path between the Am386SX/SXL 
microprocessor and other devices. The data bus 
outputs are active High and will float during Bus Hold 
Acknowledge. Data bus reads require that read-data 
setup and hold times (t21 and t22) be met relative to 
CLK2 for correct operation. 

Address Bus (A23-A1 , BHE, BLE ) 

These three-state outputs provide physical memory 
addresses or I/O port addresses. A23-A16 are Low 
during I/O transfers, except for I/O transfers automati- 
cally generated by coprocessor instructions. During 
coprocessor I/O transfers, A22-A1 6 are driven Low and 
A23 is driven High, so that this address line can be used 
by external logic to generate the coprocessor select 
signal. Thus, the I/O address driven by the Am386SX/ 
SXL microprocessor for coprocessor commands is 
8000F8H, the I/O addresses driven by the Am386SX/ 
SXL CPU for coprocessor data are 8000FCH or 
8000FEH or cycles to a 387SX math coprocessor. 

The address bus is capable of addressing 16 Mb of 
physical memory space (000000H through FFFFFFH), 
and 64 Kb of I/O address space (000000H through 
00FFFFH) for programmed I/O. The address bus is 
active High and will float during Bus Hold Acknowledge. 

The Byte Enable outputs, BHE and BLE, directly 
indicate which bytes of th e 1 6-b it data bus are involved 
with the current transfer. BHE applies to D1 5-D8 and 
BLE applies to D7-D0. If both BHE and BLE are 
asserted, then 1 6 bits of data are being transferred. See 
Table 13 for a complete decoding of these signals. The 
Byte Enables are active Low and will float during Bus 
Hold Acknowledge. 



Bus C ycle Definition Signals (W/R, D/c, M/io, 

LOCK) 

These three-state outputs define the type of bus cycle 
being performed :_W/R distinguishes between write and 
read cycles; D/C^ distinguishes between data and 
control cycles; M/ IO disti nguishes between memory and 
I/O cycles; and, LOCK distinguishes between locked 
and unlocked bus cycles. All of these signals are active 
Low and will float during Bus Acknowledge. 

The primary bus cycle definition signals are W/R, D/C, 
and M/IO, since these are the signals driven valid as 
ADS ( Address Status output) becomes active. The 
LOCK is driven valid at the same time the bus cycle be- 
gins, which, due to address pipelining, could be after 
ADS becomes_active. Exact bus cycle definitions, as a 
function of W/R, D/C, and M/IO, are given in Table 14. 

Table 13. Byte Enable Definitions 



BHE 


BLE 


Function 








Word Transfer 





1 


Byte transfer on upper byte 
of the data bus, D15-D8 


1 





Byte transfer on lower byte 
of the data bus, D7-D0 


1 


1 


Never occurs 



LOCK indicates that other system bus masters are not 
to gain control of the system bus while it is active. LOCK 
is activated on the CLK2 edge that begins the first 
locked bus cycle (i.e., it is not active at the same time as 
the other bus cycle definition pins) and is deactivated 
when READY is returned at the end of the last bus cycle 
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Table 14. Bus Cycle Definition 


M/io 


D/C 


W/R 


Bus Cycle Type 


Locked? 











Interrupt Acknowledge 


Yes 








1 


Does not occur 


— 





1 





I/O Data Read 


No 





1 


1 


I/O Data Write 


No 


1 








Memory Code Read 


No 


1 





1 


Halt: Shutdown: 
Address = 2 Address = 
BHE =1 BHE =1 
BLE =0 BLE =0 


No 


1 


1 





Memory Data Read 


Some Cycles 


1 


1 


1 


Memory Data Write 


Some Cycles 



which is to be loc ked. The beginning of a bus cycle is 
determined when READY is ret urned in a previous bus 
cycle and ano ther is pending (ADS is active), or the 
clock in which ADS is driven active if the bus was idle. 
This means that it follows more closely with the write 
data rules when it is valid, but may cause the bus to 
be locked longer than desired. The LOCK signal may 
be explicitly activated by the LOCK prefix on certain 
instructions. 



LOCK is always asserted when executing the XCHG 
instruction, during descriptor updates, and during the 
interrupt acknowledge sequence. 



Bus Control Signals (ads, ready, na) 

The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining and bus cycle 
termination. 

Address Status (ads) 

This three-state output indicates thatja valid bus c ycle 
definition and address (W/R, D/C, M/IO, BHE, BLE, and 
A23-A1 ) are b eing d riven at the Am386SX/SXL micro- 
processor pins. ADS is an active Low output. Once ADS 
is driven active, valid address, Byte En ables, and defini- 
tion signals will not change. In addition, ADS will remain 
active u ntil its associated bus cycle begins (when 
READY is returned for the previous bus cycle when 
running pipelined bus cycles). When address pipe- 
lining is utilized, maximum throughput is achieved by 
initiating bus cycles wh en AD S and READY are active in 
the same clock cycle. ADS will float during Bus Hold 
Acknowledge. See sections Non-Pipelined Address 
and P ipelined Address for additional information on how 
ADS is asserted for different bus states. 



Transfer Acknowledge (ready) 

This input indicates the current bu s cycl e is c omp lete, 
and the active bytes indicat ed by B HE and BLE are 
accepted or provided. When READY is sampled active 
during a read cycle or interrupt acknowledge cycle, the 
Am386SX/SXL microprocessor la tches th e input data 
and terminates the cycle. When READY is sampled 
active during a write cycle, the processor terminates the 
bus cycle. 



READY is ignored on the first bus state of all bus cycles, 
and sam pled each bus state thereafter until asserted. 
READY must eventually be asserted to acknowledge 
every bus cycle, including Halt Indication and S hutdown 
Indication bus cycles. When being sampled, READY 
must always meet setup and hold times (t19 and t20) 
for correct operation. 

Next Address Request (na) 
This is used to request address pipelining. This input 
in dicates the system is preparedjo accept jiew values 
of BHE, BLE, A23-A1, W/R, D/C, and M/IO from the 
Am386SX/SXL CPU even if the end of th e current cycle 
is not being acknowledged on READY. If this input is 
active when sampled, the next address is driven onto 
the bus, provided the next bus request is already 
pending internally. NA is ignored in CLK cycles in which 
ADS or READY is activated. This signal is active Low 
and must satisfy setup and hold times (t15 and t1 6) for 
correct operation. See sections Read and Write Cycles 
and Pipelined Address for additional information. 

Bus Arbitration Signals (HOLD, HLDA) 

This section describes the mechanism by which the 
processor relinquishes control of its local buses when 
requested by another bus master device. See section 
Entering and Exiting Hold Acknowledge for additional 
information. 
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Bus Hold Request (HOLD) 

This input indicates some device other than the 
Am386SX/SXL microprocessor requires bus master- 
ship. When co ntrol is gran ted, the Am386SX/SXL CPU 
floats A23-A1 , BHE, BLE, D15-D0, LOCK, M/IO, D/C, 
W/R, and ADS, and then activates HLDA, thus entering 
the Bus Hold Acknowledge state. The local bus will 
remain granted to the requesting master until HOLD 
becomes inactive. When HOLD becomes inactive, the 
Am386SX/SXL microprocessor will deactivate HLDA 
and drive the local bus (at the same time), thus 
terminating the Hold Acknowledge condition. 

HOLD must remain asserted as long as any other 
device is a local bus master. External pull-up resistors 
maybe required when in the Hold Acknowledge (HLDA) 
state, since none of the Am386SX/SXL microprocessor 
floated outputs have internal pull-up resistors. See sec- 
tion Resistor Recommendations for additional infor- 
mation. HOLD is not recognized while RESET is active. 
If RESET is asserted while HOLD is asserted, RESET 
has priority and places the bus into an idle state, rather 
than the Hold Acknowledge (high impedance) state. 

HOLD is a level-sensitive, active High, synchronous 
input. HOLD signals must always meet setup and hold 
times (t23 and t24) for correct operation. 

Bus Hold Acknowledge (HLDA) 

When active (High), this output indicates the Am386SX/ 
SXL microprocessor has relinquished control of its local 
bus in response to an asserted HOLD signal, and is in 
the Bus Hold Acknowledge state. 

The Bus Hold Acknowledge state offers near complete 
signal isolation. In the HLDA state is the only signal 
being driven by the Am386SX/SXL microprocessor. 
The other output or bidirectional signal s (D1 5-D0 , BHE, 
BLE, A23-A1 , W/R, D/C, M/IO, LOCK, and ADS) are in 
a high-impedance state so the requesting bus master 
may control them. These pins remain Off throughout the 
time that HLDA remains active (see Table 15). Pull-up 
resistors may be desired on several signals to avoid 
spurious activity when no bus master is driving them. 
See section Resistor Recommendations for additional 
information. 

When the HOLD signal is made inactive, the Am386SX/ 
SXL microprocessor will deactivate HLDA and drive the 
bus. One rising edge on the NMI input is remembered 
for processing after the HOLD input is negated. 

Table 15. Output Pin State During HOLD 



Pin Value 


Pin Names 


1 
Float 


HLDA 


LOCK, M/IO, D/C, W/R, ADS, 
A23-A1, BHE, BLE, D15-D0 



system test when test equipment drives the system, and 
in hardware fault-tolerant applications. 

HOLD Latencies 

The maximum possible HOLD latency depends on the 
software being executed. The actual HOLD latency at 
any time d epends on the current bus activity, the state of 
the LOCK signal (internal to the CPU) activated by the 
LOCK prefix, and interrupts. The Am386SX/SXL micro- 
processor will not honor a HOLD request until the 
current bus operation is complete. 

The Am386SX/SXL microprocessor breaks 32-bit data 
or I/O ac cesses into 2 internally locked 16-bit bus 
cycles; the LOCK signal is not asserted. The Am386SX/ 
SXL microprocessor breaks unaligned 16-bit or 32-bit 
data or I/O accesses i nto 2 o r 3 internally locked 16-bit 
bus cycles. Again, the LOCK signal is not asserted but a 
HOLD request will not be recognized until the end of the 
entire transfer. 

Wait states affect HOLD latency. The Am386SX/SXL 
microprocessor will not honor a HOLD request until the 
end of the current bus operation, no matter how many 
wait states are required. Systems with DMA wh ere data 
transfer is critical must insure that READY returns 
promptly. 



Coproce ssor Interface Signals (PEREQ, BUSY, 

ERROR) 

In the following sections are descriptions of signals 
dedicated to the math coprocessor interface. In addition 
to the data bus, address bus, and bus cycle definition 
signals, the following signals control communication 
between the Am386SX/SXL microprocessor and its 
387SX math coprocessor extension. 

Coprocessor Request (PEREQ) 

When asserted (High), this input signal indicates a 
coprocessor request for a data operand to be 
transferred to/from memory by the Am386SX/SXL Mi- 
croprocessor. In response, the Am386SX/SXL micro- 
processor transfers information between the math 
coprocessor and memory. Because the Am386SX/SXL 
CPU has internally stored the math coprocessor op- 
code being executed, it performs the requested data 
transfer with the correct direction and memory address. 

PEREQ is level-sensitive active High asynchronous 
signal. Setup and hold times (t29 and t30) relative to 
the CLK2 signal must be met to guarantee recognition 
at a particular clock edge. This signal is provided with a 
weak internal pull-down resistor of around 20 Kohms to 
Ground so that it will not float active when left 
unconnected. 



In addition to the normal usage of Hold Acknowledge 
with DMA controllers or master peripherals, the near 
complete isolation has particular attractiveness during 



Coprocessor Busy (busy) 

When asserted Low, this input indicates that the 
coprocessor is still executing an instruction, and is not 
yet able to accept another. When the Am386SX/SXL mi- 
croprocessor encounters any coprocessor instruction 
which operates on the numerics stack (e.g., load, pop, 
or arithmetic operation), or the WAIT instruction, this 
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input is first automatically sampl ed unti l it is seen to be 
inactive. This sampling of the BUSY input prevents 
overrunning the execution of a previous coprocessor 
instruction. 

The FNINIT, FNSTENV, FNSAVE, FNSTSW, 
FNSTCW, and FNCLEX coprocessor instructions are 
allowed to execute even if BUSY is active, since these 
instructions are used for coprocessor initialization and 
exception-clearing. 



BUSY is an active Low, level-sensitive, asynchronous 
signal. Setup and hold times (t29 and t30), relative to 
the CLK2 signal, must be met to guarantee recognition 
at a particular clock edge. This pin is provided with 
a weak internal pull-up resistor of around 20 Kohms to 
Vcc so that it will not float active when left unconnected. 



BUSY serves an additional function. If BUSY is sampled 
Low at the falling edge of RESET, the Am386SX/SXL 
microprocessor performs an internal self-test ( see se c- 
tion Bus Activity During and Following Reset). If BUSY is 
sampled High, no self-test is performed. 



Coprocessor Error (error) 

When asserted Low, this input signal indicates that 
the previous coprocessor instruction generated a 
coprocessor error of a type not masked by the 
coprocessor's control register. This input is auto- 
matically sampled by the Am386SX/SXL microproces- 
sor when a coprocessor instruction is encountered, and 
if active, the Am386SX/SXL CPU generates Exception 
16 to access the error-handling software. 

Several coprocessor instructions, generally those which 
clear the nu meric error flags in the coprocessor or save 
coprocessor state, do execute without the Am386S X/ 
SXL CPU generating Exception 16 even if ERROR is 
active. These instructions are FNINIT, FNCLEX, 
FNSTSW, FNSTSWAX, FNSTCW, FNSTENV, and 
FNSAVE. 



ERROR is an active Low, level-sensitive, asynchronous 
signal. Setup and hold times (t29 and t30), relative to 
the CLK2 signal, must be met to guarantee recognition 
at a particular clock edge. This pin is provided with a 
weak internal pull-up resistor of around 20 Kohms to V cc 
so that it will not float active when left unconnected. 

Interrupt Signals (INTR, NMI, RESET) 

The following descriptions cover inputs that can 
interrupt or suspend execution of the processor's 
current instruction stream. 

Maskable Interrupt Request (INTR) 

When asserted, this input indicates a request for 
interrupt service, which can be masked by the 
Am386SX/SXL microprocessor Flag Register IF bit. 
When the Am386SX/SXL CPU responds to the INTR in- 
put, it performs two interrupt acknowledge bus cycles 
and, at the end of the second, latches an 8-bit interrupt 
vector on D7-D0 to identify the source of the interrupt. 



INTR is an active High, level-sensitive, asynchronous 
signal. Setup and hold times (t27 and t28), relative to 
the CLK2 signal, must be met to guarantee recognition 
at a particular clock edge. To assure recognition of an 
INTR request, INTR should remain active until the first 
interrupt acknowledge bus cycle begins. INTR is 
sampled at the beginning of every instruction in the 
Am386SX/SXL microprocessor's Execution Unit. In 
order to be recognized at a particular instruction 
boundary, INTR must be active at least eight CLK2 clock 
periods before the beginning of the instruction. If 
recognized, the Am386SX/SXL CPU will begin 
execution of the interrupt. 

Non-Maskable Interrupt Request (NMI) 

This input indicates a request for interrupt service which 
cannot be masked by software. The non-maskable 
interrupt request is always processed according to the 
pointer or gate in slot 2 of the interrupt table. Because of 
the fixed NMI slot assignment, no interrupt acknowledge 
cycles are performed when processing NMI. 

NMI is an active High, rising edge-sensitive, asyn- 
chronous signal. Setup and hold times (t27 and t28), 
relative to the CLK2 signal, must be met to guarantee 
recognition at a particular clock edge. To assure 
recognition of NMI, it must be inactive for at least eight 
CLK2 periods, and then be active for at least eight CLK2 
periods before the beginning of the instruction boundary 
in the Am386SX/SXL microprocessor's Execution Unit. 

Once NMI processing has begun, no additional NMI's 
are processed until after the next IRET instruction, 
which is typically the end of the NMI service routine. If 
NMI is re-asserted prior to that time, however, one rising 
edge on NMI will be remembered for processing after 
executing the next IRET instruction. 

Interrupt Latency 

The time that elapses before an interrupt request is 
serviced (interrupt latency) varies according to several 
factors. This delay must be taken into account by the 
interrupt source. Any of the following factors can affect 
interrupt latency: 

1 . If interrupts are masked, an INTR request will not be 
recognized until interrupts are re-enabled. 

2. If an NMI is currently being serviced, an incoming 
NMI request will not be recognized until the 
Am386SX/SXL microprocessor encounters the 
IRET instruction. 

3. An interrupt request is recognized only on an in- 
struction boundary of the Am386SX/SXL 
microprocessor's Execution Unit except for the 
following cases: 

— Repeat string instructions can be interrupted after 
each iteration. 

— If the instruction loads the Stack Segment 
register, an interrupt is not processed until after 
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the following instruction, which should be an ESP. 
This allows the entire stack pointer to be loaded 
without interruption. 

— If an instruction sets the interrupt flag (enabling 
interrupts), an interrupt is not processed until after 
the next instruction. 

The longest latency occurs when the interrupt 
request arrives while the Am386SX/SXL micropro- 
cessor is executing a long instruction such as 
multiplication, division, or a task switch in the Pro- 
tected Mode. 

4. Saving the Flags register and CS:EIP registers. 

5. If interrupt service routine requires a task switch, 
time must be allowed for the task switch. 

6. If the interrupt service routine saves registers 
that are not automatically saved by the Am386SX/ 
SXL microprocessor. 

Reset 

This input signal suspends any operation in progress 
and places the Am386SX/SXL microprocessor in a 
known reset state. The Am386SX/SXL CPU is reset by 
asserting RESET for 15 or more CLK2 periods (80 or 
more CLK2 periods before requesting self -te st). W hen 
RESET is active, all other input pins, except FLT, are 
ignored, and all other bus pins are driven to an Idle Bus 
state, as shown in Table 16. If RESET and HOLD are 
both active at a point in time, RESET takes priority even 
if the Am386SX/SXL microprocessor was in a Hold Ac- 
knowledge state prior to RESET active. 

Reset is an active High, level-sensitive, synchronous 
signal. Setup and hold times (t25 and t26) must be met 
in order to assure proper operation of the Am386SX/ 
SXL microprocessor. 

Bus Transfer Mechanism 

All data transfers occur as a result of one or more bus 
cycles. Logical data operands of byte and word lengths 
may be transferred without restrictions on physical 
address alignment. Any byte boundary may be used, 
although two physical bus cycles are performed as 
required for unaligned operand transfers. 

The Am386SX/SXL microprocessor address signals 
are designed to simplify external system hardware. 
High er-o rder address bits are provided by A23-A1. 
BHE and BLE provide linear selects for the two bytes of 
the 16-bit data bus. 

Byte Enable outputs BHE and BLE are asserted when 
their associated data bus bytes are involved with the 
present bus cycle, as listed in Table 17. 



Each bus cycle is composed of at least two bus states. 
Each bus state requires one processor clock period. 
Additional bus states added to a single bus cycle are 
called wait states. See section Bus Functional 
Description. 

Table 16. Pin State (Bus Idle) During Reset 



Pin Name 


Signal Level During Reset 


ADS 


1 


D15-D0 


Float 


BHE, BLE 





A23-A1 


1 


W/R 





D/C 


1 


M/io 



1 


LOCK 


HLDA 






Table 17. Byte Enables and Associated 
Data and Operand Bytes 



Byte Enable Signal 


Associated Data Bus Signals 


BLE 
BHE 


D7-D0 (Byte 0— least significant) 
D15-D8 (Byte 1 — most significant) 



Memory and I/O Spaces 

Bus cycles may access physical memory space or I/O 
space. Peripheral devices in the system may either be 
memory-mapped, l/O-mapped, or both. As shown in 
Figure 24, physical memory addresses range from 
000000H to OFFFFFFH (1 6 Mb) and I/O addresses from 
000000H to 00FFFFH (64 Kb). Note the I/O addresses 
used by the automatic I/O cycles for coprocessor 
communication are 8000F8H to 8000FFH, beyond the 
address range of programmed I/O, to allow easy 
generation ofa coprocessor chip select signal using the 
A23 and M/Io signals. 

Bus Functional Description 

The Am386SX/SXL microprocessor has separate, par- 
allel buses for data and address. The data bus is 1 6-bits 
in width, and bidirectional. The address bus provides a 
24-bit value using 23 signals for the 23 upper-order 
address bits and 23 Byte Enable signals to directly indi- 
cate the active bytes. These buses are interpreted and 
controlled by several definition signals. 
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FFFFFFH 


Physical Memory 
16Mb 


8000FFH 

8000F8H 

(Note) 


Not 
•' ■ Accessible yy 








_ 






Coprocessor 














Not 
Accessible v\- 








OOFFFFH 
000000H 




1 Accessible 
j Programmed 


000000H 


64Kb 








I/O Space 



Note: Since A23 is High during automatic communication with coprocessor, A23 High and M/To Low can be used to easily generate a 
coprocessor select signal. 
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Figure 24. Physical Memory and I/O Spaces 
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Fastest non-pipelined bus cycles consist of T1 and T2 
Figure 25. Fastest Read Cycles with Non-Pipelined Address Timing 
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The definition of_each bus cycle is given by three 
signals: M/Io, W/R, and D/C. At the same time, a valid 
addr ess i s present on the Byte Enable signals, BHE 
and BLE, an d the other address signals, A23-A1 . A 
status signal, ADS, indicates when the Am386SX/SXL 
microprocessor issues a new bus cycle definition and 
address. 

Collectively, the address bus, data bus, and all assoc- 
iated control signals are referred to simply as the bus. 
When active, the bus performs one of the bus cycles 
below: 

1 . Read from memory space; 

2. Locked read from memory space; 

3. Write to memory space; 

4. Locked write to memory space; 

5. Read from I/O space (or math coprocessor); 

6. Write to I/O space (or math coprocessor); 

7. Interrupt acknowledge (always locked); 

8. Indicate halt, or indicate shutdown. 



Table 1 4 shows the encoding of the bus cycle definition 
signals for each bus cycle. See section Bus Cycle Defi- 
nition Signals for additional information. 

When the Am386SX/SXL microprocessor bus is not 
per-forming one of the activities listed above, it is either 
idle or in the Hold Acknowledge state, which may be 
detected externally. The idle state can be identified by 
the Am386SX/SXL CPU gi ving no further assertions on 
its address strobe output (ADS) since the beginning of 
its most recent cycle, and the most recent bus cycle 
having been terminated. The Hold Acknowledge state is 
identified by the Am386SX/SXL microprocessor assert- 
ing its Hold Acknowledge (HLDA) output. 

Bus Functional Description 

The Am386SX/SXL microprocessor has separate, 
parallel buses for data and address. The data bus is 
16-bits in width, and bidirectional. The address bus 
provides a 24-bit value using 23 signals for the 23 
upper-order address bits and 2 Byte Enable signals to 
directly indicate the active bytes. These buses are 
interpreted and controlled by several definition signals. 
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(Output) 

D15-D0 
(Input during Read) 




D15-D0 [- — ^y 



-Qn£>- 



Fastest pipelined bus cycles consist of T1P and T2P 
Figure 26. Fastest Read Cycles with Pipelined Address Timing 
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The shortest time unit of bus activity is a bus state. A bus 
state is one processor clock period (two CLK2 periods) 
in duration. A complete data transfer occurs during a 
bus cycle, composed of two or more bus states. 

The fastest Am386SX/SXL microprocessor bus cycle 
requires only two bus states. For example, three 
consecutive bus read cycles, each consisting of two bus 
states, are shown in Figure 25. The bus states in each 
cycle are named T1 and T2. Any memory or I/O address 
may be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. 

Every bus cycle continues until it is acknowledged by 
the external syst em hard ware, using the Am386SX/SXL 
microprocessor READY input. Acknowledging the bus 
cycle at the end of the first T2 results in the short est bus 
cycle, requiring only T1 and T2. If READY is not 
immediately assert ed howev er, T2 states are repeated 
indefinitely until the READY input is sampled active. 



The address pipelining option provides a choice of bus 
cycle timings. Pipelined or non-pipelined address timing 
is selectable on a cycle-by-cycle basis with the Next 
Address (NA) input. 

Whe n address pipelining is selected, the addressJBHE, 
BLE, a nd A23-A1) and definition (W/R, D/C, M/IO, and 
LOCK) of the next cycle are available before the end of 
the current cycle. To signal their availability, the 
Am38 6SX/SXL microprocessor address status output 
(ADS) is asserted. Figure 26 illustrates the fastest read 
cycles with pipelined address timing. 

Note from Figure 26 the fastest bus cycles using 
pipelined address require only two bus states, named 
T1 P and T2P. Therefore, cycles with pipelined address 
timing allow the same data bandwidth as non-pipelined 
cycles, but address-to-data access time is increased by 
one T-state time compared to that of a non-pipelined 
cycle. 
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Note: Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state; an active bus cycle 
can immediately follow the write cycle. 
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Figure 27. Various Bus Cycles with Non-Pipelined Address (Zero Wait States) 
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Read and Write Cycles 

Data transfers occur as a result of bus cycles, classified 
as read or write cycles. During read cycles, data is 
transferred from an external device to the processor. 
During write cycles, data is transferred from the 
processor to an external device. 

Two choices of address timing are dynamically 
selectable: non-pipelined or pipelined. After an idle bus 
state, the processor always uses non-pipelined address 
timing. However, the NA (Next Address) input may be 
asserted to select pipelined address timing for the next 
bus cycle. When pipelining is selected and the 
Am386SX/SXL microprocessor has a bus request 
pending internally, the address and definition of the next 
cycle is made available even bef ore the current bus 
cycle is acknowledged by READY. 

Terminating a read or write cycle, like any bus cycle, 
requires acknowledging the cycle by asserting the 
READY input. Until acknowledged, the processor 
inserts wait states into the bus cycle, to allow adjustment 



forthe speed of any external device. External hardware, 
which has decoded the address and bus cycle type, 
asserts the ready input at the appropriate time. 

At the en d of the second bus state within the bus cycle, 
READY is sampled. At that time, if exter nal hardw are 
acknowledges the bus cycle by asserting R EADY, th e 
bus cycle terminates as shown in Figure 27. If READY is 
negated, as in Figure 28, the Am386SX/SXL micropro- 
cessor e xecutes another bus state (a wait state) and 
READY is sampled again at the end of that state. This 
continue s indefinitely until the cycle is acknowledged by 
READY asserted. 

When the current cycle is acknowledged, the 
Am386SX/SXL microprocessor terminates it. When a 
read cycle is acknowledged, the Am386SX/SXL CPU 
latches the information present at its data pins. When a 
write cycle is acknowledged, the Am386SX/SXL 
microprocessor's write data remains valid throughout 
phase one of the next bus state, to provide write data 
hold time. 
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Note: Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state; an active bus cycle 
can immediately follow the write cycle. 
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Figure 28. Various Bus Cycles with Non-Pipelined Address (Various Number of Wait States) 
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Non-Pipelined Address 

Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 27 shows a mixture 
of read and write cycles with non-pipelined address 
timing. Figure 27 shows that the fastest possible cycles 
with non-pipelined address have two bus states per bus 
cycle. The states are named T1 and T2. In phase one of 
T1 , the address signals and bus cycle definition signals 
are driv en va lid and, to signal their availability, address 
strobe (ADS) is simultaneously asserted. 

During read or write cycles the data bus behaves 
as follows. If the cycle is a read, the Am386SX/SXL mi- 
croprocessor floats its data signal to allow driving by the 
external device being addressed. The Am386SX/SXL 
microprocessor requires that all data bus pins be at a 
valid logic st ate (Hig h or Low) at the end of each read 
cycle, when READY is asserted. The system must be 
designed to meet this requirement. If the cycle is a write, 
data signals are driven by the Am386SX/SXL CPU 
beginning in phase two of T1 until phase one of the bus 
state following cycle acknowledgment. 



Figure 28 illustrates non-pipelined bus cycle s with one 
wait state added to Cycles 2 and 3. READY is sampled 
inactive at the end of the first T2 in Cycles 2 and 3. 
Therefore, Cycles 2 and 3 have T2 repeated again. At 
the end of the second T2, READY is sampled active. 

When address pipelining is not used, the address and 
bus cycle definition remain valid during all wait states. 
When wait states are added, and it is desirable to 
maintainnon-pipelined address timing, it is necessary to 
negate NA during each T2 state, except the last one, as 
shown in Figure 28, Cycles 2 and 3. If NA is sampled 
active during a T2 otherthan the last one, the next state 
would be T2I or T2P instead of another T2. 

The bus states and transitions, when address pipelining 
is not used, are completely illustrated by Figure 29. The 
bus transitions between four possible states, T1 , T2, Ti, 
and Th. Bus cycles consist of T1 and T2, with T2 being 
repeated for wait states. Otherwise the bus may be idle, 
Ti, or in the Hold Acknowledge state Th. 



HOLD Asserted 



HOLD Negated • No Request 



HOLD Negated • 
No Request 




READY Asserted • HOLD Asserted 



. HOLD Asserted 

READY Asserted • HOLD Negated • No Request 




ALWAYS 



READY Asserted • 
HOLD Negated • 
Request Pending 



Bus States: 

T1 — First clock of a non-pipelined bus cycle (Am386SX/SXL CPU drives new address and asserts ADS). 
T2 — Subsequent clocks of a bus cycle when NA has not been sampled asserted in the current bus cycle. 
Ti — Idle state. 
Th— Hold Acknowledge state (Am386SX/SXL CPU asserts HLDA). 

The fastest bus cycle consists of two states: T1 and T2. 

Four basic bus states describe bus operation when not using pipelined address. 
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Figure 29. Bus States (Not Using Pipelined Address) 
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Bus cycles always begin with T1 . T1 always leads to T2. 
If a bus cycle is not acknowledged during T2 and NA is 
inactive, T2 is repeated. When a cycle is acknowledged 
during T2, the following state will be T1 of the next bus 
cycle, if a bus request is pending internally, orTi, if there 
is no bus request pending, or Th, if the HOLD input is 
being asserted. 

Use of pipelined address allows the Am386SX/SXL mi- 
croprocessor to enter three additional bus states not 
shown in Figure 29. Figure 33 is the complete bus state 
diagram, including pipelined address cycles. 

Pipelined Address 

Address pipelining is the option of requesting the 
address and the bus cycle definition of the next 



internally pending bus cycl e before the curr ent b us 
cycle is acknowledged with READY asserted. ADS is 
asserted by the Am386SX/SXL microprocessor when 
the next address is issued. The address pipelining op- 
tion is controlled on a cycle-by-cycle basis with the NA 
input signal. 

Once a bus cycle is in progress and the current address 
has been valid for at least one entire bus state, the NA 
input is sampled at the end of every phase one until the 
bus cycle is acknowledged. During non-pipelined bus 
cycles, NA is sampled at the end of phase one in every 
T2. An example is Cycle 2 in Figure 30, during which 
NA is sampled at the end of phase one of every T2 
(it was asserted once during the first T2 and has no 
further effect during that bus cycle). 



Processor CLK 




Note: Following any idle bus state (Ti), addresses are non-pipelined. Within non-pipelined bus cycles, NA is only sampled during 
wait states. Therefore, to begin address pipelining during a group of non-pipelined bus cycles requires a non-pipelined 
cycle with at least one wait state (Cycle 2 above). 
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Figure 30. Transitioning to Pipelined Address During Burst of Bus Cycles 
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If NA is sampled active, the Am386SX/SXL micropro- 
cessor is free to drive the address a nd bu s cycle 
definition of the next bus cycle, and assert ADS, as soon 
as it has a bus request internally pending. It may drive 
the next address as early as the next bus state, whether 
the current bus cycle is acknowledged at that time or 
not. 

Regarding the details of address pipelining, the 
Am386SX/SXL CPU has the following characteristics: 

1 . The next address may appear as early as the bus 
state after NA was sampled active (see Figures 30 
and 31). In that case, state T2P is entered immed- 
iately. However, when there is not an internal bus 
request already pending, the next address will not be 
available immediately after NA is asserted and T2I is 
entered instead of T2P (see Figure 32, Cycle 3). 



Provided the current bus cycle is not yet acknow- 
ledged by READY asserted, T2P will be entered as 
soon as the Am386SX/SXL microprocessor does 
drive the next address. External hardware should 
therefore observe the ADS output as confirmation 
the next address is actually being driven on the bus. 

Any address which is validated by a pulse on the 
ADS output will remain stable on the address pins 
for at least two processor clock periods. The 
Am386SX/SXL CPU cannot produce a new address 
more frequently than every two processor clock 
periods (see Figures 30, 31, and 32). 

Only the address and bus cycle definition of the very 
next bus cycle is available. The pipelining capability 
cannot look further than one bus cycle ahead (see 
Figure 32, Cycle 1). 
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Note: Following any idle bus state (Ti) the address is always non-pipelined and NA is only sampled during wait states. To start 
address pipelining after an idle state requires a non-pipelined cycle with at least one wait state (Cycle 1 above). The 
pipelined cycles (2, 3, and 4 above) are shown with various numbers of wait states. 

Figure 31. Fastest Transition to Pipelined Address Following Idle Bus State 
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The complete bus state transition diagram, including 
operation with pipelined address, is given in Figure 33. 
Note that it is a superset of the diagram for non-pipelined 
address only, and the three additional bus states for 
pipelined address are drawn in bold. 



The fastest bus cycle with pipelined address consists of 
just two bus states, T1P and T2P (recall for non- 
pipelined address it is T1 and T2). T1 P is the first bus 
state of a pipelined cycle. 
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ADS is asserted as soon 
as the CPU has another 
bus cycle to perform, which 
is not always immediately 
after NA is asserted. 



As long as the CPU enters the T2P 
state during Cycle 3, address pipelining 
is maintained in Cycle 4. 
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Figure 32. Details of Address Pipelining During Cycles with Wait States 
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HOLD Asserted 



NA Asserted • 
(HOLD Asserted + 
No Request) 



HOLD Negated 
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Bus States: 

T1 — First clock of a non- pipelin ed bus cycle (Am386SX/SXL CPU drives new 
address and asserts ADS). 

T2 — Subsequent clocks of a bus cycle when NA has not been sampled asserted 
in the current bus cycle. 

T2I — Subsequent clocks of a bus cycle when NA has been sampled asserted in 
the current bus cycle but there is not yet an internal bus request pending 
(Am386SX/SXL CPU will not drive new address or assert ADS). 

T2P — Subsequent clocks of a bus cycle when NA has been sampled asserted in 
the current bus cycle and there is an internal bus request pending 
(Am386SX/SXL CPU drives new address and asserts ADS). 

T1 P — First clock of a pipelined bus cycle. 

Ti — Idle state. 

Th — Hold Acknowledge state (Am386SX/SXL CPU asserts HLDA). 

Asserting NA for pipelined address gives access to three more bus states: T2I, 

T2P,andT1P. 

Using pipelined address, the fastest bus cycle consists of T1P and T2P. 
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Figure 33. Complete Bus States (including Pipelined Address) 
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Initiating and Maintaining Pipelined Address 

Using the state diagram Figure 33, observe the 
transitions from an idle state (Ti) to the beginning of a 
pipelined bus cycle (T1 P). From an idle state (Ti) the first 
bus cycle must begin with T1, and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA is asserted and the 
first bus cycle ends in a T2P state (the address for the 
next bus cycle is driven during T2P). The fastest path 
from an idle state to a bus cycle with pipelined address is 
shown in bold below: 

Ti, Ti, Ti, T1-T2-T2P, T1P-T2P, 

Idle Non-Pipelined Pipelined 

States Cycle Cycle 

T1 -T2-T2P are the states of the bus cycle that establish 
address pipelining for the next bus cycle, which begins 
with T1 P. The same is true after a bus hold state, shown 
below: 

Th, Th, Th, T1-T2-T2P, T1P-T2P, 

Hold Acknowledge Non-Pipelined Pipelined 
States Cycle Cycle 

The transition to pipelined address is shown functionally 
by Figure 31 , Cycle 1 . Note that Cycle 1 is used to 
transition into pipelined address timing for the 
subsequent Cycles 2, 3, and 4, which are pipelined. The 
NA input is asserted at the appropriate time to select 
address pipelining for Cycle 2, 3, and 4. 

Once a bus cycle is in progress and the current address 
has been valid for one entire bus state, the NA input is 
sampled at the end of every phase one until the bus 
cycle is acknowledged. Sampling begins in T2 during 
Cycle 1 in Figure 31 . Once NA is sampled active during 
the current cycle, the Am386SX/SXL microprocessor is 
free to drive a new address and bus cycle definition on 
the bus as early as the next bus state. In Figure 31 , Cy- 
cle 1 for example, the next address is driven during state 
T2P. Thus, Cycle 1 makes the transition to pipelined 
address timing, since it begins with T1 but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined bus 
cycle, an d it begins with T1 P. Cycle 2 begins as soon as 
READY asserted terminates Cycle 1 . 

Examples of transition bus cycles are Figure 31 , Cycle 1 
and Figure 30, Cycle 2. Figure 31 shows transition 
during the very first cycle after an idle bus state, which is 
the fastest possible transition into address pipelining. 
Figure 30, Cycle 2 shows a transition cycle occurring 
during a burst of bus cycles. In any case, a transition 
cycle is the same whenever it occurs: it consists at least 
of T1, T2 (NA is asserted at that time), and T2P 
(provided the Am386SX/SXL microprocessor has an 
internal bus request already pending, which it almost 
always has). T2P states are repeated if wait states are 
added to the cycle. 

Note that only three states (T1, T2, and T2P) are 
required in a bus cycle performing a transition from 



non-pipelined address into pipelined address timing 
(e.g., Figure 31 , Cycle 1 ). Figure 31 , Cycles 2, 3, and 4 
show that address pipelining can be maintained with 
two-state bus cycles consisting only of T1 P and T2P. 

Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting NA 
and detecting that the Am386SX/SXL microprocessor 
enters T2P during the current bus cycle. The current bus 
cycle must end in state T2P for pipelining to be main- 
ta ined i n the next cycle. T2P is identified by the assertion 
of ADS. Figures 30 and 31 , however, each show pipelin- 
ing ending after Cycle 4, because Cycle 4 ends in T2I. 
This indicates the Am386SX/SXL CPU did not have an 
internal bus request prior to the acknowledgment of 
Cycle 4. If a cycle ends with a T2 or T2I, the next cycle 
will not be pipelined. 

Realistically, address_pipelining is almost always 
maintained as long as NA is sampled asserted. This is 
so because in the absence of any other request, a code 
prefetch request is always internally pending until the 
instruction decoder and code prefetch queue are 
completely full. Therefore, address pipelining is main- 
tained for long bursts of bus cycles, if the bus is available 
(i.e., HOLD inactive), and NA is sampled active in each 
of the bus cycles. 

Interrupt Acknowledge (INTA) Cycles 

In response to an interrupt request on the INTR input 
when interrupts are enabled, the Am386SX/SXL micro- 
processor performs two interrupt acknowledge cycles. 
These bus cycles are similar to read cycles in that bus 
definition signals define the type of bus activity taking 
place, a nd each cycle continues until acknowledged by 
READY sampled active. 

The state of A2 distinguishes the first and second 
interrupt acknowledge cycles. The byte address driven 
during the fi rst i nterrupt ackn owled ge cycle is 4 
(A23-A3, A1, BLE Low, A2 and BHE High). The byte 
address driven during th e se cond interrupt^ acknow- 
ledge cycle is (A23-A1 , BLE Low, and BHE High). 



The LOCK output is asserted from the beginning of 
the first interrupt acknowledge cycle until the end of 
the second interrupt acknowledge cycle. Four idle bus 
states (Ti) are inserted by the Am386SX/SXL micropro- 
cessor between the two interrupt acknowledge cycles 
forcompatibility with spec TRHRL of the 8259A Interrupt 
Controller. 

During both interrupt acknowledge cycles, D15-D0 
float. No data is read at the end of the first interrupt 
acknowledge cycle. At the end of the second interrupt 
acknowledge cycle, the Am386SX/SXL microprocessor 
will read an external interrupt vector from D7-D0 of the 
data bus. The vector indicates the specific interrupt 
number (from 0-255) requiring service. 

Halt Indication Cycle 

The execution unit halts as a result of executing a HLT 
instruction. Signaling its entrance into the halt state, a 
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halt indication cycle is performed. The halt indication 
cycle is identified by the state of the bus definition 
signals shown on page 39, Bus Cycle Definition Signals, 
and an address of 2. The halt indication cycle must 
be acknowledged by READY asserted. A halted 
Am386SX/SXL CPU resumes execution when INTR (if 
interrupts are enabled), NMI, or RESET is asserted. 

Shutdown Indication Cycle 

The Am386SX/SXL microprocessor shuts down as a 
result of a protection fault while attempting to process a 
double fault. Signaling its entrance into the shutdown 
state, a shutdown indication cycle is performed. The 
shutdown indication cycle is identified by the state of the 
bus definition signals shown in section Bus Cycle 



Definition Signals and an address of 0. Th e shutdo wn 
indication cycle must be acknowledged by READY as- 
serted. A shut-down Am386SX/SXL microprocessor 
resumes execution when NMI or RESET is asserted. 

Entering and Exiting Hold Acknowledge 

The Bus Hold Acknowledge state (Th) is entered in 
response to the HOLD input being asserted. In the Bus 
Hold Acknowledge state, the Am386SX/SXL micropro- 
cessor floats all outputs or bidirectional signals, except 
for HLDA. HLDA is asserted as long as the Am386SX/ 
SXL CPU remains in the Bus Hold Acknowledge state. 
In the Bus Hold Acknowledge state, all inputs except 
HOLD, FLT, and RESET are ignored. 
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Interrupt Vector (0-255) is read on D7-D0 at end of second Interrupt Acknowledge bus cycle. Because each Interrupt Acknowledge bus cycle is 
followed by idle bus states, asserting NA has no practical effect. Choose the approach which is simplest for your system hardware design. 
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Figure 34. Interrupt Acknowledge Cycles 
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Th may be entered from a bus idle state, as in Figure 37, 
or after the acknow ledgment of the current physical bus 
cycle, if the LOCK signal is not asserted, as in Figures 
38 and 39. 

Th is exited in response to the HOLD input being 
negated. The following state will be Ti if no bus request 
is pending, as in Figure 37. The following bus state will 
be T1 if a bus request is internally pending, as in Figures 
38 and 39. Th is exited in response to RESET being 
asserted. 

If a rising edge occurs on the edge-triggered NMI in- 
put while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exited, 
unless the Am386SX/SXL microprocessor is reset 
before Th is exited. 

Reset During Hold Acknowledge 

RESET being asserted takes priority over HOLD being 
asserted. If RESET is asserted while HOLD remains 
asserted, the Am386SX/SXL microprocessor drives its 
pins to defined states during reset, as in Table 16 (Pin 



State During Reset), and performs internal reset activity 
as usual. 

If HOLD remains asserted when RESET is inactive, the 
Am386SX/SXL CPU enters the Hold Acknowledge 
state before performing its first bus cycle, provided 
HOLD is still asserted when the Am386SX/SXL micro- 
processor would otherwise perform its first bus cycle. 

FLOAT 

Activating the FLT input floats all Am386SX/SXL micro- 
processor bidirec tiona l and output signals, including 
HLDA. Asserting FLT isolates the Am386SX/SXL mi- 
croprocessor from the surrounding circuitry. 

As the Am386SX/SXL microprocessor is packaged in a 
surface mount PQFP, it cannot be removed from the 
motherboard wh en In-Circuit Emulation (ICE) is 
needed. The FLT input allows the Am386SX/SXL CPU 
to be electrically isolated from the surrounding circuitry. 
This allows connection of an emulator to the Am386SX/ 
SXL microprocessor PQFP without removing it from the 
PCB. This method of emulation is referred to as ON- 
Circuit Emulation (ONCE). 
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Figure 35. Example Halt Indication Cycle from Non-Pipelined Cycle 
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Entering and Exiting FLOAT 

FLT is an asynchronous, active Low input. It is recog- 
nized on the rising edge of CLK2. When recognized, it 
aborts the current bus cycle and floats the outputs of 
the Am386SX/SXL microprocessor (Figure 41). FLT 
must be held Low for a minimum of 16-CLK2 cycles. 
Res et should be asserted and held asserted until after 
FLT is deasserted. This will ensure that the Am386SX/ 
SXL CPU will exit FLOAT in a valid state. 

Asserting the FLT input unconditionally aborts the 
current bus cycle and forces the Am386SX/SXL CPU 
into the FLOAT mode. Since activating FLT 
unconditionally forces the Am386SX/SXL CPU into 
FLOAT mode, the Am386SX/SXL microprocessor is not 
guaranteed t o en ter FLOAT in a valid state. After 
deactivating FLT, the Am386SX/SXL CPU is not 
guaranteed to exit FL OAT mode in a valid state. This is 
not a problem, as the FLT pin is meant to be used only 
during ONCE. After exiting FLOAT, the Am386SX/SXL 
microprocessor must be reset to ret urn it to a valid state. 
Reset should be asserted before FLT is deasserted. 



AMD H 

This will ensure that the Am386SX/SXL CPU will exit 
FLOAT in a valid state. 

FLT has an internal pull-up resistor, and if it is not used it 
should be unconnected. 

Bus Activity During and Following Reset 

RESET is the highest priority input signal, capable of 
interrupting any processor activity when it is asserted. 
A bus cycle in progress can be aborted at any stage, or 
idle states and Bus Hold Acknowledge states discon- 
tinued, so that the reset state is established. 

RESET should remain asserted for at least 15-CLK2 
periods to ensure it is recognized throughout the 
Am386SX/SXL microprocessor, and at least 80-CLK2 
periods if self-test is going to be requested at the falling 
edge. RESET asserted pulses less than 15-CLK2 
periods may not be recognized. RESET pulses less 
than 80-CLK2 periods followed by a self-test may cause 
the self-test to report a failure when no true failure 
exists. 
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Figure 36. Example Shutdown Indication Cycle from Non-Pipelined Cycle 
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Provided the RESET falling edge meets setup and hold 
times (t25 and t26), the internal processor clock phase is 
defined at that time as illustrated by Figure 40 and 
Figure 48. 

A self -test may be req uested at the time RESET goes 
inactive by having the BUSY input at a Low level, as 
shown in Figure 40. The self-test requires approxi- 
mately (2 20 + 60) CLK2 periods to complete. The self- 
test duration is not affected by the test results. Even 
if the self-test indicates a problem, the Am386SX/SXL 
microprocessor attempts to proceed with the reset 
sequence afterwards. 

After the RESET falling edge (and after the self-test 
if it was requested), the Am386SX/SXL microprocessor 
performs an internal initialization sequence for approx- 
imately 350- to 450-CLK2 periods. 

Self-Test Signature 

Upon co mpletion of self-test (if self-test was requested 
by driving BUSY Low at the falling edge of RESET) the 
EAX register will contain a signature of 00000000H, 



indicating the Am386SX/SXL microprocessor passed 
its self-test of microcode and major PLA contents with 
no problems detected. The passing signature in EAX, 
00000000H, applies to all revision levels. Any non-zero 
signature indicates the unit is faulty. 

Component and Revision Identifiers 

To assist users the Am386SX/SXL microprocessor, 
after reset, holds a component identifier and revision 
identifier in its DX register. The upper 8 bits of DX hold 
23H as identification of the Am386SX/SXL CPU (the 
lower nibble, 03H, refers to the Am386DX/DXL micro- 
processor architecture. The upper nibble, 02H, refers to 
the second member of the Am386DX/DXL microproces- 
sor Family). The lower 8 bits of DX hold an 8-bit 
unsigned binary number related to the component 
revision level. The revision identifier will, in general, 
chronologically track those component steppings which 
are intended to have certain improvements or distinction 
from previous steppings. The Am386SX/SXL micropro- 
cessor revision identifierwill track that of the Am386DX/ 
DXL CPU where possible. 
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Note: For maximum design flexibility the Am386SX/SXL CPU has no internal pull-up resistors on its outputs. The design may re- 
quire an external pull-up on ADS and other outputs to keep them negated during float periods. 
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Figure 37. Requesting Hold from Idle Bus 
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Note: HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) 
requirements are met. This waveform is useful for determining Hold Acknowledge latency. 
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Figure 38. Requesting Hold from Active Bus (na Inactive) 
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requirements are met. This waveform is useful for determining Hold Acknowledge latency. 
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Figure 39. Requesting Hold from Idle Bus (NA Active) 
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Notes: 

1 . BUSY should be held stable for 8-CLK2 periods before and after the CLK2 period in which RESET falling edge occurs. 

2. If self-test is requested, the outputs remain in their reset state as shown here. 



Figure 40. Bus Activity from Reset Until First Code Fetch 
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Figure 41. Entering and Exiting FLT 
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The revision identifier is intended to assist users to a 
practical extent. However, the revision identifier value is 
not guaranteed to change with every stepping revision, 
or to follow a completely uniform numerical sequence, 
depending on the type or intention of revision, or 
manufacturing materials required to be changed. 

Table 18. Component and Revision 
identifier History 



Intel i386SX 
Stepping 


Am386SXL 

Microprocessor 

Revision 


Revision Identifier 


B 
C 


A1 
B 


05H 
08H 



Coprocessor Interfacing 

The Am386SX/SXL microprocessor provides an 
automatic interface for a 387SX math coprocessor. A 
387SX math coprocessor uses an I/O mapped interface 
driven automatically by the Am386S X/SXL CPU and 
assisted by three dedicated signals: BUSY, ERROR, 
and PEREQ. 

As the Am386SX/SXL microprocessor begins 
suppo rting a math c oprocessor instruction, it tests the 
BUSY and ERROR signals to determine if the copro- 
ces sor can a ccept its next instruction. Thus, the BUSY 
and ERROR inputs eliminate the need for any preamble 
bus cycles for communication between processor and 
math coprocessor. A 387SX math coprocessor can be 
given its command op-code immediately. The dedicated 
signals provide instruction synchronization and elimi- 
nate the need of using the WAIT op-code (9BH) for 
387SX math coprocessor instruction synchronization 
(the WAIT opcode was required when the 8086 or 8088 
was used with the 8087 math coprocessor). 

Custom math coprocessors can be included in 
Am386SX/SXL microprocessor based systems by 
memory-mapped or l/O-mapped interfaces. Such math 
coprocessor interfaces allow a completely custom 
protocol, and are not limited to a set of math coproces- 
sor protocol primitives. Instead, memory-mapped or 
l/O-mapped interfaces may use all applicable instruc- 
tions for high-speed math coprocessor communication. 
The BUSY and ERROR inputs of the Am386SX/SXL mi- 
croprocessor may also be used for the custom math 
coprocessor interface, if such hardware assist is 
desired. These signals can be tested by the WAIT op- 
code ( 9BH). The WAIT instruction will wait until the 
BUSY input is inactive (interruptable by an NMI or 
enabled I NTR inp ut), but generates a n Exce ption 16 
fault if the ERROR pin is active when the BUSY goes (or 
is) inactive. If the custom math coprocessor interface is 
memory-mapped, protection of the addresses used for 
the interface can be provided with the Am386SX/SXL 
CPU's on-chip paging or segmentation mechanisms. If 



the custom interface is l/O-mapped, protection of the 
interface can be provided with the IOPL (I/O Privilege 
Level) mechanism. 

A 387SX math coprocessor interface is I/O mapped as 
shown in Table 1 9. Note that a 387SX math coprocessor 
interface addresses are beyond the 0H-0FFFFH range 
for programmed I/O. When the Am386SX/SXL micro- 
processor supports the 387SX math coprocessor, the 
Am386SX/SXL CPU automatically generates bus 
cycles to the coprocessor interface addresses. 

Table 19. Math Coprocessor Port Address 



Address in Am386SXL 
CPU I/O Space 


387SX-Compatible Math 
Coprocessor Register 


8000F8H 
8000FCH/8000FEH* 


Op-code Register 
Operand Register 



*Generated as 2nd bus cycle during Dword transfer. 

To correctly map a 387SX math coprocessor re gisters 
to th e appr opriate I/O addresses, connect the CM DO 
and CMD1 lines of a 387SX math coprocessor, as 
listed in Table 20. 



Table 20. Connections for cmdo 



and CMD1 Inputs for a 387SX 



Signal 



CMDO 
CMD1 



Connection 



Connected directly to Am386SXL CPU A2 signal. 
Connect to ground. 



Software Testing for Math Coprocessor Presence 

When software is used to test for math coprocessor 
(387SX) presence, it should use only the following math 
coprocessor op-codes: FINIT, FNINIT, FSTCW mem, 
FSTSW mem, and FSTSW AX. To use other math 
coprocessor op-codes when a math coprocessor is 
known to be not present, first set EM = 1 in the 
Am386SX/SXL CPU's CR0 register. 

PACKAGE THERMAL SPECIFICATIONS 

The Am386SX/SXL microprocessor is specified for 
operation when case temperature is within the range of 
0°C-1 00°C. The case temperature may be measured in 
any environment to determine whether the Am386SX/ 
SXL CPU is within specified operating range. The case 
temperature should be measured at the center of the top 
surface opposite the pins. 

The ambient temperature is guaranteed as long as Tc is 
not violated. The ambient temperature can be calcu- 
lated from the 9jc and 9]a from the following equations: 

Tj = Tc + P«9jc 

Ta = Tj-P«9]a 

Tc = Ta + P»[9ja-9jc] 
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ELECTRICAL SPECIFICATIONS 

The following sections describe recommended electri- 
cal connections for the Am386SX/SXL microprocessor, 
and its electrical specifications. 

Power and Grounding 

The Am386SX/SXL CPU has modest power 
requirements. However, its high clock frequency and 47 
output buffers (address, data, control, and HLDA) can 
cause power surges as multiple output buffers drive new 
signal levels simultaneously. For clean on-chip power 
distribution at high frequency, 14 V cc and 18 Vss pins 
separately feed functional units of the Am386SX/SXL 
microprocessor. 

Power and ground connections must be made to all 
external V cc and V ss pins of the Am386SX/SXL micro- 
processor. On the circuit board, all V cc pins should 
be connected on a Vcc plane, and V ss pins should be 
connected on a GND plane. 

Power Decoupling Recommendations 

Liberal decoupling capacitors should be placed nearthe 
Am386SX/SXL microprocessor. The Am386SX/SXL 
CPU driving its 24-bit address bus and 1 6-bit data bus at 
high frequencies can cause transient power surges, 
particularly when driving large capacitive loads. Low 
inductance capacitors and interconnects are recom- 
mended for best high frequency electrical performance. 
Inductance can be reduced by shortening circuit board 
traces between the Am386SX/SXL microprocessor and 
decoupling capacitors as much as possible. 



Resistor Recommendations 



The ERROR, FLT, and BUSY inputs have internal pull- 
up resistors of approximately 20 Kohms, and the 
PEREQ input has an internal pull-down resistor of 
approximately 20 Kohms, built into the Am386SX/SXL 
microprocessor to keep these signals inactive when a 
387SX-compatible math coprocessor is not present in 
the system (or temporarily removed from its socket). 

In typical designs, the external pull-up resistors shown 
in Table 21 are recommended. However, a particular 
design may have reason to adjust the resistor values 
recommended here, or alter the use of pull-up resistors 
in other ways. 

Other Connection Recommendations 

For reliable operation, always connect unused inputs to 
an appropriate signal level. NC pins should always re- 
main unconnected. Connection of NC pins to V cc or V ss 
will result in component malfunction or incompatibility 
with future steppings of the Am386SX/SXL CPU. 

Particularly when not using the interrupts or bus hold (as 
when first prototyping), prevent any chance of spurious 
activity by connecting these associated inputs to GND. 



Pin 

40 
38 



Signal 

INTR 

NMI 

HOLD 



If not using address pipelining, connect pin ( 
through a pull-up in the range of 20 Kohms to V< 



6 (NA) 



Table 21. Recommended Resistor Pull-Ups to Vcc 


Pin 


Signal 


Pull-Up Value 


Purpose 


16 


ADS 


20 Kohms ±10% 


Lightly pull ADS inactive during Am386SX/SXL 
CPU Hold Acknowledge states. 


26 


LOCK 


20 Kohms ±10% 


Lightly pull LOCK inactive during Am386SX/SXL 
CPU Hold Acknowledge states. 
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ABSOLUTE MAXIMUM RATINGS 

Ambient Temperature under bias -65 to 125°C 

Storage Temperature -65 to 150°C 

Stresses above those listed may cause permanent 
damage to the device. Exposure to absolute maximum 
rating conditions for extended periods of time may affect 
device reliability. 

DC CHARACTERISTICS over COMMERCIAL operating ranges 

Vcc = 5 V ±1 0%; Tcase = 0°C to +1 00°C (1 6, 20, 25, and 33 MHz) 
Vcc = 5 V ±5%; Tcase = 0°C to +1 00°C (40 MHz) 



OPERATING RANGES 

Supply Voltage with respect to V ss -0.5 V to 7 V 

Voltage on other pins -0.5 V to (Vcc + 0.5)V 

Operating ranges define those limits between which the 
functionality of the device is guaranteed. 



Symbol 


Parameter Description 


Notes 


Min 


Max 


Unit 


V,L 


Input Low Voltage 


(Nbtel) 


-0.3 


+0.8 


V 


V,H 


Input High Voltage 




2.0 


Vcc+0.3 


V 


V ILC 


CLK2 Input Low Voltage 


(Notel) 


-0.3 


+0.8 


V 


VlHC 


CLK2 Input High Voltage 




2.7 


Vcc+0.3 


V 


Vol 


Output Low Voltage 












Iol = 4 mA: A23-A1, D15-D0 






0.45 


V 




Iol = 5 mA: BHE, BLE, W/R, 






0.45 


V 




D/C, M/IO, LOCK, 












ADS, HLDA 










Voh 


Output High Voltage 












Ioh = 1.0 mA: A23-A1, D15-D0 




2.4 




V 




Ioh = 0.2 mA: A23-A1, D15-D0 




Vcc-0.5 




V 




Ioh = 0.9 mA: BHE, BLE, W/R, 




2.4 




V 




D/C, M/IO, LOCK, 












ADS, HLDA 












Ioh = 0.18 mA: BHE, BLE, W/R, 




Vcc-0.5 








D/C, M/IO, LOCK, 












ADS, HLDA 










lu 


Input Leakage Current (for all pins ex- 
cept PEREQ, BUSY, FLT, and ERROR) 


0V<V| N <VcC 




±15 


u.A 


I.H 


Input Leakage Current (PEREQ pin) 


Vi H = 2.4V(Note2) 




200 


HA 


I.L 


Input Leakage Current 


Vil = 0.45 V (Note 3) 




-400 


jxA 


(BUSY, ERROR, and FLT pins) 


Ilo 


Output Leakage Current 


0.45 V < Vout < Vcc 




±15 


uA 


Ice 


Supply Current 


Vcc = 5.0 V 










CLK2 = 32 MHz: with -16* 


IccTyp = 






mA 




CLK2 = 40 MHz: with -20 


IccTyp = 130 mA 




155 


mA 




CLK2 = 50 MHz: with -25 


Ice Typ = 1 60 m A 




190 


mA 




CLK2 = 66 MHz: with -33 


Ice Typ = 21 mA 




245 


mA 




CLK2 = 80 MHz: with -40 


Ice Typ = 255 mA 




295 


mA 


IcCSB 


Standby Current (Am386SXL CPU) 


IccsBTyp = 20u.A(Note5) 




150 


uA 


C|N 


Input Capacitance 


F c = 1 MHz (Note 4) 




10 


PF 


CoUT 


Output or I/O Capacitance 


F c = 1 MHz (Note 4) 




12 


pF 


CcLK 


CLK2 Capacitance 


Fc = 1 MHz (Note 4) 




20 


PF 



Notes: Tested at the minimum operating frequency of the part. 
"Contact AMD for 16-MHz availability. 

1. The Min value, -0.3, is not 100% tested. 

2. PEREQ input has an internal pull-down resistor. 

3. BUSY, FLT, and ERROR inputs each have an internal 
pull-up resistor. 

4. Not 100% tested. 



5. Inputs at rails, outputs unloaded, PEREQ Low, ERROR High, 
BUSY High, and FLT High. 
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SWITCHING CHARACTERISTICS 

The switching characteristics given consist of output de- 
lays, input setup requirements, and input hold require- 
ments. All switching characteristics are relative to the 
CLK2 rising edge crossing the 2.0 V level. 

Switching characteristic measurement is defined by 
Figure 42. Inputs must be driven to the voltage levels 
indicated by Figure 42 when switching characteristics 
are measured. Output delays are specified with 
minimum and maximum limits measured, as shown. 
The minimum delay times are hold times provided to 
external circuitry. Input setup and hold times are 



AMD 



a 



specified as minimums, defining the smallest accept- 
able sampling window. Within the sampling window, a 
synchronous input signal must be stable for correct 
operation. 



Outputs ADS, W/R, D/C, M/IO, LOCK, BHE, BLE, 
A23-A1, and HLDA only change at the beginning of 
phase one. D15-D0 (write cycles) only change at the 
beginning of phase two. The READY, HOLD, BUSY, 
ERROR, PEREQ, FLT, and D15-D0 (read cycles) 
inputs are sampled at the beginning of phase one. The 
NA, INTR, and NMI inputs are sampled at the beginning 
of phase two. 



CLK2 



<M 



A23-A1.BHE, BLE, 
ADS, M/IO, D/C, 



W/R, LOCK, HLDA 



Min 



*~~VbJ— * Min Max 



Tx 



7 Z =^^7 / 



02 



Valid 
Output n+1 



D15-D0 



[ 



NA, INTR, NMI 



READY, HOLD, 



FLT, ERROR, BUSY, 
PEREQ, D15-D0 



[ 



«-©-H Min 



Valid 
Output n 



U— ©— ► 



[3.0V • J- .,- ,y .. ^ *- ^~ 
•■•'%V1S-51.6V^ 
ov '"••— "^ ^-^ 



^—VBt-H Min Max 

1.5\A— : \ — M.5V 



. f. w Valid 
s! -° v Output n+1 



-©— » 



U— ©— ► 



3.0V ; — -j 

*-jei.5V 

ov ""-■ ■"" : - ^ 



-®— ►) 



Valid 
Input 



1.5 V^p 



Legend: A — Maximum Output Delay Characteristic 
B — Minimum Output Delay Characteristic 
C — Minimum Input Setup Characteristic 
D — Minimum Input Hold Characteristic 



15022B-030 



Figure 42. Drive Levels and Measurement Points for Switching Characteristics 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating ranges 

Switching Characteristics at 40 MHz (Am386SX Microprocessor Only): Vcc = 5 V±5%; Tcase = 0°C to 100°C 


Symbol 


Parameter Description 


Notes 


Ref. 
Figure 


Min 


Max 


Unit 




Operating Frequency 


Half CLK2 frequency 




2 


40 


MHz 


1 


CLK2 Period 




44 


12.5 


250 


ns 


2 


CLK2 High Time 


at 2.7 V 


44 


4.5 




ns 


3 


CLK2 Low Time 


at 0.8 V 


44 


4.5 




ns 


4 


CLK2 Fall Time 


2.7 V to 0.8 V (Note 3) 


44 




4 


ns 


5 


CLK2 Rise Time 


0.8 V to 2.7 V (Note 3) 


44 




4 


ns 


6 


A23-A1 Valid Delay 


C L = 50 pF 


47 


4 


13 


ns 


7 


A23-A1 Float Delay 


(Notel) 


51 


4 


20 


ns 


8 


BHE, BLE, LOCK Valid Delay 


C L = 50 pF 


47 


4 


13 


ns 


9 


BHE, BLE, LOCK Float Delay 


(Notel) 


51 


4 


20 


ns 


10 


M/IO, D/C, W/R, ADS Valid Delay 


C L = 50 pF 


47 


4 


13 


ns 


11 


W/R, M/IO, D/C, ADS Float Delay 


(Notel) 


51 


4 


20 


ns 


12 


D15-D0 Write Data Valid Delay 


C L = 50 pF (Note 4) 


47 


7 


18 


ns 


12a 


D15-D0 Write Data Hold Time 


C L = 50 pF 


49 


2 




ns 


13 


D15-D0 Write Data Float Delay 


(Notel) 


51 


4 


17 


ns 


14 


HLDA Valid Delay 


C L = 50 pF 


51 


4 


17 


ns 


14f 


HLDA Float Delay 




51 


4 


17 


ns 


15 


NA Setup Time 




46 


5 




ns 


16 


NA Hold Time 




46 


2 




ns 


19 


READY Setup Time 




46 


7 




ns 


20 


READY Hold Time 




46 


4 




ns 


21 


D15-D0 Read Data Setup Time 




46 


4 




ns 


22 


D15-D0 Read Data Hold Time 




46 


3 




ns 


23 


HOLD Setup Time 




46 


4 




ns 


24 


HOLD Hold Time 




46 


2 




ns 


25 


RESET Setup Time 




52 


4 




ns 


26 


RESET Hold Time 




52 


2 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


46 


5 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


46 


5 




ns 


29 




(Note 2) 


46 


5 




ns 


PEREQ, ERROR, BUSY, FLT* Setup Time 


30 




(Note 2) 


46 


4 




ns 


PEREQ, ERROR, BUSY, FLT* Hold Time 



Notes: *Float feature is available in Rev. B0 and later. 

1 . Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes to 
assure recognition within a specific CLK2 period. 

3. Rise and Fall times are not tested. They are guaranteed by design characterization. 

4. Min time is not 100% tested. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating ranges 
Switching Characteristics at 33 MHz: V cc = 5 V±10%; T CAS e = 0°C to 100°C 


Symbol 


Parameter Description 


Notes 


Ref. 
Figure 


Min 


Max 


Unit 




Operating Frequency: Am386SX CPU 
Am386SXL CPU 


Half CLK2 freq. 
Half CLK2 freq. 




2 



33 
33 


MHz 
MHz 


1 


CLK2 Period: Am386SX CPU 
Am386SXL CPU 




43 
43 


15 
15 




ns 
ns 


2a 


CLK2 High Time 


at2V 


43 


6.25 




ns 


2b 


CLK2 High Time 


at 3.7 V 


43 


4 




ns 


3a 


CLK2 Low Time 


at2V 


43 


6.25 




ns 


3b 


CLK2 Low Time 


at 0.8 V 


43 


4.5 




ns 


4 


CLK2 Fall Time 


3.7 V to 0.8 V 


(Note 3) 


43 




4 


ns 


5 


CLK2 Rise Time 


0.8 V to 3.7 V 


(Note 3) 


43 




4 


ns 


6 


A23-A1 Valid Delay 


C L = 50 pF 


47 


4 


15 


ns 


7 


A23-A1 Float Delay 


(Notel) 


51 


4 


20 


ns 


8 




C L = 50 pF 


47 


4 


15 


ns 


BHE, BLE, LOCK Valid Delay 


9 


BHE, BLE, LOCK Float Delay 


(Notel) 


51 


4 


20 


ns 


10 


M/iO, D/C, W/R, ADS Valid Delay 


C L = 50 pF 


47 


4 


15 


ns 


11 


W/R, M/iO, D/C, ADS Float Delay 


(Notel) 


51 


4 


20 


ns 


12 


D15-D0 Write Data Valid Delay 


C L = 50 pF 


(Note 4) 


47 


7 


23 


ns 


12a 


D15-D0 Write Data Hold Time 


C L = 50 pF 


49 


2 




ns 


13 


D15-D0 Write Data Float Delay 


(Notel) 


51 


4 


17 


ns 


14 


HLDA Valid Delay 


C L = 50 pF 


47 


4 


20 


ns 


14f 


HLDA Float Delay 




51 


4 


20 


ns 


15 


NA Setup Time 




46 


5 




ns 


16 


NA Hold Time 




46 


2 




ns 


19 


READY Setup Time 




46 


7 




ns 


20 






46 


4 




ns 


READY Hold Time 


21 


D15-D0 Read Data Setup Time 




46 


5 




ns 


22 


D15-D0 Read Data Hold Time 




46 


3 




ns 


23 


HOLD Setup Time 




46 


9 




ns 


24 


HOLD Hold Time 




46 


2 




ns 


25 


RESET Setup Time 




52 


5 




ns 


26 


RESET Hold Time 




52 


2 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


46 


5 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


46 


5 




ns 


29 


PEREQ, ERROR, BUSY Setup Time 


(Note 2) 


46 


5 




ns 


30 




(Note 2) 


46 


4 




ns 


PEREQ, ERROR, BUSY Hold Time 



Notes: 1. 
2. 



Float condition occurs when maximum output current becomes less than Lo in magnitude. Float delay is not 100% tested. 

These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes to 

assure recognition within a specific CLK2 period. 

Rise and Fall times are not tested. They are guaranteed by design characterization. 

Min time is not 100% tested. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating ranges 
Switching Characteristics at 25 MHz: V cc = 5 V±10%; Tcase = 0°C to 100°C 


Symbol 


Parameter Description 


Notes 


Ref. 
Figure 


Min 


Max 


Unit 




Operating Frequency: Am386SX CPU 
Am386SXL CPU 


Half CLK2 f req. 
Half CLK2 f req. 




2 



25 
25 


MHz 
MHz 


1 


CLK2 Period: Am386SX CPU 
Am386SXL CPU 




43 
43 


20 
20 




ns 
ns 


2a 


CLK2 High Time 


at2V 


43 


7 




ns 


2b 


CLK2 High Time 


at (Vcc- 0.8 V) 


43 


4 




ns 


3a 


CLK2 Low Time 


at2V 


43 


7 




ns 


3b 


CLK2 Low Time 


at 0.8 V 


43 


5 




ns 


4 


CLK2 Fall Time 


(Vcc-0.8V)to0.8V (Note 3) 


43 




7 


ns 


5 


CLK2 Rise Time 


0.8 V to (Vcc -0.8 V) (Note 3) 


43 




7 


ns 


6 


A23-A1 Valid Delay 


C L = 50 pF 


47 


4 


17 


ns 


7 


A23-A1 Float Delay 


(Notel) 


51 


4 


30 


ns 


8 




C L = 50 pF 


47 


4 


17 


ns 


BHE, BLE, LOCK Valid Delay 


9 


BHE, BLE, LOCK Float Delay 


(Notel) 


51 


4 


30 


ns 


10 


M/TO, D/C, W/R, ADS Valid Delay 


C L = 50 pF 


47 


4 


17 


ns 


11 


W/R, M/IO, D/C, ADS Float Delay 


(Notel) 


51 


4 


30 


ns 


12 


D15-D0 Write Data Valid Delay 


C L = 50 pF 


47 


7 


23 


ns 


12a 


D15-D0 Write Data Hold Time 


C L = 50 pF 


49 


2 




ns 


13 


D15-D0 Write Data Float Delay 


(Notel) 


51 


4 


22 


ns 


14 


HLDA Valid Delay 


C L = 50 pF 


47 


4 


22 


ns 


14f 


HLDA Float Delay 




51 


4 


22 


ns 


15 


NA Setup Time 




46 


5 




ns 


16 


NA Hold Time 




46 


3 




ns 


19 


READY Setup Time 




46 


9 




ns 


20 






46 


4 




ns 


READY Hold Time 


21 


D15-D0 Read Data Setup Time 




46 


7 




ns 


22 


D15-D0 Read Data Hold Time 




46 


5 




ns 


23 


HOLD Setup Time 




46 


9 




ns 


24 


HOLD Hold Time 




46 


3 




ns 


25 


RESET Setup Time 




52 


8 




ns 


26 


RESET Hold Time 




52 


3 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


46 


6 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


46 


6 




ns 


29 




(Note 2) 


46 


6 




ns 


PEREQ, ERROR, BUSY, FLT Setup Time 


30 


PEREQ, ERROR, BUSY, FLT Hold Time 


(Note 2) 


46 


5 




ns 



Notes: 1 . Float condition occurs when maximum output current becomes less than Ilo in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to 
assure recognition within a specific CLK2 period. 

3. These are not tested. They are guaranteed by design characterization. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating ranges 
Switching Characteristics at 20 MHz: V cc = 5 V±10%; Tcase = 0°C to 100°C 


Symbol 


Parameter Description 


Notes 


Ref. 
Figure 


Min 


Max 


Unit 




Operating Frequency: Am386SX CPU 
Am386SXL CPU 


Half CLK2 freq. 
Half CLK2 freq. 




2 



20 
20 


MHz 
MHz 


1 


CLK2 Period: Am386SX CPU 
Am386SXL CPU 




43 
43 


25 
25 




ns 
ns 


2a 


CLK2 High Time 


at2V 


43 


8 




ns 


2b 


CLK2 High Time 


at (Vcc- 0.8 V) 


43 


5 




ns 


3a 


CLK2 Low Time 


at2V 


43 


8 




ns 


3b 


CLK2 Low Time 


at 0.8 V 


43 


6 




ns 


4 


CLK2 Fall Time 


(Vcc-0.8V)to0.8 V (Note 3) 


43 




8 


ns 


5 


CLK2 Rise Time 


0.8Vto(Vcc-0.8V) (Note 3) 


43 




8 


ns 


6 


A23-A1 Valid Delay 


C L = 120 pF (Note 4) 


47 


4 


30 


ns 


7 


A23-A1 Float Delay 


(Notel) 


51 


4 


32 


ns 


8 


BHE, BLE, LOCK Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


30 


ns 


9 


BHE, BLE, LOCK Float Delay 


(Notel) 


51 


4 


32 


ns 


10a 


M/IO, D/C Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


28 


ns 


10b 


W/R, ADS Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


26 


ns 


11 


W/R, M/IO, D/C, ADS Float Delay 


(Notel) 


51 


6 


30 


ns 


12 


D15-D0 Write Data Valid Delay 


C L = 120p (Note 4) 


47 


4 


38 


ns 


13 


D15-D0 Write Data Float Delay 


(Notel) 


51 


4 


27 


ns 


14 


HLDA Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


28 


ns 


14f 


HLDA Float Delay 




51 


4 


28 


ns 


15 


NA Setup Time 




46 


5 




ns 


16 


NA Hold Time 




46 


12 




ns 


19 


READY Setup Time 




46 


12 




ns 


20 


READY Hold Time 




46 


4 




ns 


21 


D15-D0 Read Data Setup Time 




46 


9 




ns 


22 


D15-D0 Read Data Hold Time 




46 


6 




ns 


23 


HOLD Setup Time 




46 


17 




ns 


24 


HOLD Hold Time 




46 


5 




ns 


25 


RESET Setup Time 




52 


12 




ns 


26 


RESET Hold Time 




52 


4 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


46 


16 




ns 


28 


NMIJNTR Hold Time 


(Note 2) 


46 


16 




ns 


29 




(Note 2) 


46 


14 




ns 


PEREQ, ERROR, BUSY, FLT Setup Time 


30 


PEREQ, ERROR, BUSY, FLT Hold Time 


(Note 2) 


46 


5 




ns 



Notes: 1 . Float condition occurs when maximum output current becomes less than Lo in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to 
assure recognition within a specific CLK2 period. 

3. These are not tested. They are guaranteed by design characterization. 

4. Tested with Cl set at 50 pF and derated to support the indicated distributed capacitive load. See Figures 53 and 54 for the 
capacitive derating curve. 
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SWITCHING CHARACTERISTICS over COMMERCIAL operating ranges 
Switching Characteristics at 16 MHz*: Vcc = 5 V±10%; Tcase = 0°C to 100°C 


Symbol 


Parameter Description 


Notes 


Ref. 
Figure 


Min 


Max 


Unit 




Operating Frequency: Am386SX CPU 
Am386SXL CPU 


HalfCLK2freq. 
HalfCLK2freq. 




2 



16 
16 


MHz 
MHz 


1 


CLK2 Period: Am386SX CPU 
Am386SXL CPU 




43 
43 


31 
31 




ns 
ns 


2a 


CLK2 High Time 


at2V 


43 


9 




ns 


2b 


CLK2 High Time 


at (Vcc- 0.8 V) 


43 


5 




ns 


3a 


CLK2 Low Time 


at2V 


43 


9 




ns 


3b 


CLK2 Low Time 


at 0.8 V 


43 


7 




ns 


4 


CLK2 Fall Time 


(Vcc-0.8V)to0.8V (Note 3) 


43 




8 


ns 


5 


CLK2 Rise Time 


0.8Vto(Vcc-0.8V) (Note 3) 


43 




8 


ns 


6 


A23-A1 Valid Delay 


C L = 120 pF (Note 4) 


47 


4 


36 


ns 


7 


A23-A1 Float Delay 


(Notel) 


51 


4 


40 


ns 


8 


BHE, BLE, LOCK Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


36 


ns 


9 




(Notel) 


51 


4 


40 


ns 


BHE, BLE, LOCK Float Delay 


10 


W/R, M/TO, D/C, ADS Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


33 


ns 


11 


W/R, M/TO, D/C, ADS Float Delay 


(Notel) 


51 


6 


35 


ns 


12 


D15-D0 Write Data Valid Delay 


C L = 120 pF (Note 4) 


47 


4 


40 


ns 


13 


D15-D0 Write Data Float Delay 


(Notel) 


51 


4 


35 


ns 


14 


HLDA Valid Delay 


C L = 75 pF (Note 4) 


47 


4 


33 


ns 


14f 


HLDA Float Delay 




51 


4 


33 


ns 


15 


NA Setup Time 




46 


5 




ns 


16 


NA Hold Time 




46 


21 




ns 


19 


READY Setup Time 




46 


19 




ns 


20 


READY Hold Time 




46 


4 




ns 


21 


D15-D0 Read Data Setup Time 




46 


9 




ns 


22 


D15-D0 Read Data Hold Time 




46 


6 




ns 


23 


HOLD Setup Time 




46 


26 




ns 


24 


HOLD Hold Time 




46 


5 




ns 


25 


RESET Setup Time 




52 


13 




ns 


26 


RESET Hold Time 




52 


4 




ns 


27 


NMI, INTR Setup Time 


(Note 2) 


46 


16 




ns 


28 


NMI, INTR Hold Time 


(Note 2) 


46 


16 




ns 


29 


PEREQ, ERROR, BUSY, FLT Setup Time 


(Note 2) 


46 


16 




ns 


30 




(Note 2) 


46 


5 




ns 


PEREQ, ERROR, BUSY, FLT Hold Time 



Notes: "Contact AMD for 1 6-MHz availability. 

1. Float condition occurs when maximum output current becomes less than ko in magnitude. Float delay is not 100% tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, to 
assure recognition within a specific CLK2 period. 

3. These are not tested. They are guaranteed by design characterization. 

4. Tested with Cl set at 50 pF and derated to support the indicated distributed capacitive load. See Figures 53 and 54 for the 
capacitive derating curve. 
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CLK2 



Vcc-0.8V 
2.0 V 
0.8 V 



t2a 

|i t2b H 



\ 



t5 



t3a 



t3b 



t4 



Figure 43. CLK2 Timing (16, 20, 25, and 33 MHz) 



15022B-031 



CLK2 



Vcc-0.8V 
2.0 V 
0.8 V 




t5 



t3 




t4 



Figure 44. CLK2 Timing (40 MHz) 



15022B-031a 



Am386SXL CPU Output O- 



C L 



Figure 45. AC Test Circuit 



15022B-032 
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SWITCHING WAVEFORMS 

J 



CLK2 



READY 



HOLD 



D15-D0 
(Inputs) 



BUSY, ERROR 
PEREQ, FLT 



NA 



INTR, NMI 



A. 



t20 J 

z3 









i 



t23 



t21 



t29 



<M 



Tx 



t24 






t22 



Ms 



t30 






t15 

4 * 



a. 






t27 



t16 



t28 






i 



<M 



\ 



Tx 



Figure 46. Input Setup and Hold Timing 



15022B-033 



CLK2 



BHE, BLE, 



[_T~\ 



LOCK 



w/r, m/io, r 

D/C,ADS L 



A23-A1 



D15-D0 
(Outputs) 



_r 



7 



t8 



♦ 1 



Valid n 



t10- 






Min 



Valid n 



t6 



Min 



M 



Valid n 



T 



Min 






Tx 



V^^v^^^^ 



Max 



mr 



Valid n+1 



K 



Max 



Valid n+1 



t12- 






Max 



Valid n+1 



Valid n 



(j> 1 



Min 



w 



Max 



Valid n+1 



HLDA 



Figure 47. Output Valid Delay Timing 
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SWITCHING WAVEFORMS (continued) 



01 



T1 



02 



CLK2 



W/R 



[ ^V^'^^A 



t12- 



D15-D0 



Min Min 



<EEHX 



Valid n 



15021B-076 



Figure 48. Write Data Valid Delay Timing (20 and 25 MHz) 



01 



T1 



02 



CLK2 



W/R 



[ _7^V^^~Y_7^A 



D15-D0 



t12a. 



Valid n 



Min 






E 



15021B-077 



Figure 49. Write Data Hold Timing 



CLK2 



W/R 



D15-D0 



T1 



01 



[ _^^^^^A 



[ J 



t12- 



Valid n 



02 



Min 



Max 



xzsx 



Valid n + 1 



15021B-078 



Figure 50. Write Data Valid Delay Timing (20 MHz) 
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CLK2 



BHE , BLE, 
LOCK 



W/R, M/IO, 
D/C, ADS 



A23-A1 



D15-D0 



HLDA 




t13 — Also applies to data float when write 
+1 4f cycle is followed by read or idle. 

t14 



Min 



Max 



Min 



— E 



Max 



Figure 51. Output Float Delay and HLDA Valid Delay Timing 



15022B-035 



CLK2 



«r [— % 



t25 



Initialization Sequence 




Figure 52. RESET Setup and Hold Timing and Internal Phase 



15022B-036 
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a 



nom + 6 



nom + 3 



Output 
Valid 
Delay 
(ns) 



nom -3 — 



nom -6 — 



nom -9 




150 



75 100 125 

C L (picofarads) 

15022B-037 

Figure 53. Typical Output Valid Delay Versus 

Load Capacitance at Maximum Operating 

Temperature (G_ = 120 pF) 



Output 
Valid 
Delay 
(ns) 



nom + 9 



nom + 6 — 



nom + 3 — 




nom -3 



nom -6 

75 100 125 150 

C L (picofarads) 

15022B-038 

Figure 54. Typical Output Valid Delay Versus 

Load Capacitance at Maximum Operating 

Temperature (C L = 75 pF) 



Output 

Valid 

Delay (ns) 



nom + 9 


i i i 


nom + 6 




nom + 3 




nom 




nom -3 


~iii 



50 



150 



75 100 125 

C L (picofarads) 
Figure 55. Typical Output Valid Delay Versus 
Load Capacitance at Maximum Operating 
Temperature (Cl=50 pF) 



Rise Time (ns) 
0.8 V-2.0 V 




75 100 125 

C L (picofarads) 



150 



Figure 56. Typical Output Rise Time Versus Load 
Capacitance at Maximum Operating Temperature 



DIFFERENCES BETWEEN THE Am386SX/ 
SXL CPU AND THE Am386DX/DXL CPU 

The following are the major differences between the 
Am386SX/SXL CPU and the Am386DX/DXL CPU: 

1 . The A m386 SX/S XL CPU generates byte selects on 
BHE and BLE (like the 8086 and 80286) to 
distinguish the upper and lower bytes on its 16-bit 
data bus. The Am386DX/DXL CPU uses four byte 



selects, BE3-BE0, to distinguish between the 
different bytes on its 32-bit bus. 

The Am386SX/SXL CPU has no bus sizing option. 
The Am386DX/DXL CPU can select bet ween either 
a 32-bit bus or a 1 6-bit bus by use of the BS1 6 input. 
The Am386SX/SXL CPU has a 16-bit bus size. 

The NA pin operation mjhe Am386SX/SXL CPU is 
identical to that of the NA pin on the Am386DX/DXL 
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CPU with one exception: the Am386DX/DXL CPU 
NA pin canno t be activated on 1 6-bit bus cycles 
(where BS16 is Low in the Am386DX/DXL CPU 
case), whereas NA can be activated on any 
Am386SX/SXL CPU bus cycle. 

4. The contents of all Am386SX/SXL CPU registers at 
reset are identical to the contents of the Am386DX/ 
DXL CPU registers at reset, except the DX register. 
The DX register contains a component-stepping 
identifier at reset, that is, 

in Am386DX/DXL CPU, after reset 

DH = 3 indicates Am386DX/DXL CPU 
Dl = revision number; 

in Am386SX/SXL CPU, after reset 

DH = 23H indicates Am386SX/SXL CPU 
DL = revision number. 

5. The Am386DX/DXL CPU uses A31 and M/IO as 
selects for the math coprocessor. The Am386SX/ 
SXL CPU uses A23 and M/IO as selects. 

6. The Am386DX/DXL CPU prefetch unit fetches code 
in four-byte units. The Am386SX/SXL CPU prefetch 
unit re ads two bytes as one unit (like the 80286). In 
BS16 mode, the Am386DX/DXL CPU takes two 
consecutive bus cycles to complete a prefetch 
request. If there is a data read or write request after 
the prefetch starts, the Am386DX/DXL CPU will 
fetch all four bytes before addressing the new 
request. 

7. Both Am386DX/DXL CPU and Am386SX/SXL CPU 
have the same logical address space. The only 
difference is that the Am386DX/DXL CPU has a 
32-bit physical address space and the Am386SX/ 
SXL CPU has a 24-bit physical address space. The 
Am386SX/SXL CPU has a physical memory 
address space of up to 16 Mb instead of the 4 Gb 
available to the Am386DX/DXL CPU. Therefore, in 
Am386SX/SXL CPU systems, the operating system 
must be aware of this physical memory limit and 
should allocate memory for applications programs 
within this limit. If an Am386DX/DXL CPU system 
uses only the lower 1 6 Mb of physical address, then 
there will be no extra effort required to migrate 
Am386DX/DXL CPU software to the Am386SX/SXL 
CPU. Any application which uses more than 1 6 Mb of 
memory can run on the Am386SX/SXL CPU, if the 
operating system utilizes the Am386SX/SXL CPU's 
paging mechanism. In spite of this difference in 
physical address space, the Am386SX/SXL CPU 
and Am386DX/DXL CPU can run the same 
operating systems and applications within their 
respective physical memory constraints. 

8. The Am386SX/SXL CPU has an input called FLT 
which three-states all bi-directional and output pins, 
including HLDA, when asserted. It is used with ON- 
Circuit Emulation (ONCE). 

INSTRUCTION SET 

This section describes the instruction set. The Instruc- 
tion Set Clock Count Summary lists all instructions 



along with instruction encoding diagrams and clock 
counts. Further details of the instruction encoding are 
then provided in the following sections, which 
completely describe the encoding structure and the 
definition of all fields occurring within instructions. 

The Am386SX/SXL CPU Instruction 
Encoding and Clock Count Summary 

To calculate elapsed time for an instruction, multiply the 
instruction clock count, as listed in the Instruction Set 
Clock Count Summary, by the processor clock period 
(e.g., 40 ns for a 25-MHz, 50 ns for a 20-MHz, and 
62.5 ns for a 16-MHz Am386SX/SXL microprocessor). 
The actual clock count of an Am386SX/SXL CPU 
program will average 5% more than the calculated clock 
count due to instruction sequences which execute faster 
than they can be fetched from memory. 

Instruction Clock Count Assumptions 

1. The instruction has been prefetched, decoded, and 
is ready for execution. 

2. Bus cycles do not require wait states. 

3. There are no local bus HOLD requests delaying 
processor access to the bus. 

4. No exceptions are detected during instruction 
execution. 

5. If an effective address is calculated, it does not use 
two general register components. One register, 
scaling and displacement can be used within the 
clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count shown. 

Instruction Clock Count Notation 

1 . If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand. 

2. n = number of times repeated. 

3. m = number of components in the next instruction 
executed, where the entire displacement (if any) 
counts as one component, the entire immediate data 
(if any) counts as one component, and all other bytes 
of the instruction and prefix(es) each count as one 
component. 

Misaligned or 32-Bit Operand Accesses 

— If instructions access a misaligned 16-bit operand or 
32-bit operand on even address add: 

2x clocks for read or write 
4x clocks for read and write 

— If instructions access a 32-bit operand on odd 
address add: 

4x clocks for read or write 
8 x clocks for read and write 
Wait States 

Wait states add 1 clock per wait state to instruction 
execution for each data access. 
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Am386SX/SXL instruction Set Clock Count Summary 



Instruction 



Format 



Address 

Mode/ 

Virtual 

8086 Mode 



Protected 

Virtual 

Address 

Mode 



Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 

Address 
Mode 



GENERAL DATA TRANSFER 
MOV = Move: 

Register to Register/Memory 

Register/Memory to Register 

Immediate to Register/Memory 

Immediate to Register (short form) 

Memory to Accumulator (short form) 

Accumulator to Memory (short form) 

Register/Memory to Segment Register 

Segment Register to Register/Memory 

MOVSXs Move with Sign Extension 

Register from Register/Memory 

MOVZX = Move with Zero Extension 

Register from Register/Memory 

PUSH = Push: 

Register/Memory 

Register (short form) 

Segment Register (ES.CS.SS, or DS) (short form) 

Segment Register (ES, CS, SS, DS, FS, or GS) 

Immediate 

PUSHA = Push All 

POP = Pop 

Register/Memory 

Register (short form) 

Segment Register (ES, CS, SS, or DS) 

Segment Register (ES, CS, SS, DS, FS, or GS) 

POPA=PopAII 

XCHGs Exchange 

Register/Memory with Register 

Register with Accumulator (short form) 

IN = Input From: 

Fixed Port 

Variable Port 



1 1 w mod reg r/m 



1 1 1 w 



mod reg 



1 1 1 1 w 



mod r/m 



immediate data 



1 1 w 



1 1 1 w 



immediate data 
full displacement 
full displacement 



10 1110 



mod sreg 3 r/m 



10 110 



mod sreg r/m 



1111 1 1 1 1 1 1 w mod reg r/m 



00001111 1011011W mod reg r/m 



11111111 mod 1 1 r/m 



10 10 reg 



00 sreg 2 110 



1111 10 sreg 3 000 



1 1 1 s 



immediate data 



1 1 



10 1111 mod r/m 



10 11 reg 



000 sreg 2 111 



1111 10 sreg 3 001 



110 1 



1 1 1 w mod reg 



10 10 reg 



CLK Count 
Virtual 8086 Mode 



1 1 1 1 w port number 



1 1 1 1 1 w 



28** 
27** 



2/2 


2/2* 


b 


2/4 


2/4* 


b 


2/2 


2/2* 


b 


2 


2 




4* 


4* 


b 


2* 


2* 


b 


2/5 


22/23 


b 


2/2 


2/2 


b 



5/7* 


7/9* 


2 


4 


2 


4 


2 


4 


2 


4 


18 


34 



7 

7 
24 

3/5** 
3 

12* 
13* 



7/9 
6 
25 
25 
40 

3/5** 
3 

6726* 
7727* 



h 
h 
h 

h 

h 

h,i.j 

h 



h 
h 
h 
h 
h 
h 

h 

h 
h,i,j 
H.I.J 

h 



s/t, m 
s/t, m 



* If CPL < IOPL ** If CPL > IOPL ***Clock count shown applies if I/O permission allows I/O to the port in Virtual 8086 Mode. If I/O bit map 
denies permission Exception 13 fault occurs; refer to clock counts for INT3 instruction. 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 



Format 



Virtual 
8086 Mode 



Protected 
Virtual 
Address 



Virtual 
8086 Mode 



OUT s Output To: 

Fixed Port 

Variable Port 

LEA = Load EA to Register 

SEGMENT CONTROL 

LDS = Load Pointer to DS 

LES = Load Pointer to ES 

LFS = Load Pointer to FS 

LGS= Load Pointer to GS 

LSS= Load Pointer to SS 

FLAG CONTROL 

CLC = Clear Carry Flag 

CLD = Clear Direction Flag 

CLI = Clear Interrupt Enable Flag 

CLTS= Clear Task Switched Flag 

CMC = Complement Carry Flag 

LAHF=LoadAH into Flag 

POPF = Pop Flags 

PUSH F = Push Flags 

SAHF = Store AH into Flags 

STC = Set Carry Flag 

STD = Set Direction Flag 

STI =Set Interrupt Enable Flag 

ARITHMETIC 

ADD = Add 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

ADC = Add with Carry 

Register to Register 



CLK Count 
Virtual 8086 Mode 



1 1 1 1 1 w port number 



1 1 1 1 1 1 w 



10 110 1 mod reg 



24** 
25** 



110 10 1 mod reg 



110 10 mod reg 



111110 



1111110 



111110 10 



1111 


110 



11110 10 1 



10 11111 



10 1110 1 



10 1110 



10 11110 



111110 1 



1111110 1 



111110 11 



OOOOOOdw mod reg 



0000000W 



mod reg r/m 



1 w 



mod reg r/m 



1111 


1 1 


10 10 


mod reg 


r/m 




1111 


1 1 


10 10 1 


mod reg 


r/m 


1111 


1 1 


10 10 


mod reg 


r/m 



1 s w 



mod r/m 



immediate data 



1 w 



immediate data 



1 d w mod reg 



10* 
11* 
2 

7* 
7* 
7* 
7* 
7* 

2 
2 
8 
5 
2 
2 
5 
4 
3 
2 



2 

7** 

6* 

217** 

2 



4724* 

5725* 

2 

26728* 
26728* 
26728* 
26728* 
26728* 

2 
2 
8 
5 
2 
2 
5 
4 
3 
2 



2 

7** 

6* 

2/7** 

2 



* If CPL<IOPL ** If CPL>IOPL ***Clock count shown applies if I/O permission allows I/O to the port in Virtual 8086 Mode. If I/O bitmap 
denies permission Exception 13 fault occurs; refer to clock counts for INT3 instruction. 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 








Clock Count 


Notes 


Format 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


ADC = Add with Carry (continued) 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

INC = Increment 

Register/Memory 

Register (short form) 

SUB= Subtract 

Register from Register 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

SB B = Subtract with Borrow 

Register from Register 

Register from Memory 

Memory from Register 

Immediate from Register/Memory 

Immediate from Accumulator (short form) 

DEC= Decrement 

Register/Memory 

Register (short form) 

CMP = Compare 

Register with Register 

Memory with Register 

Register with Memory 

Immediate with Register/Memory 

Immediate with Accumulator (short form) 

NEG = Change Sign 

AAA s ASCII Adjust for Add 






7** 

6* 

2/7** 

2 

2/6** 
2 

2 

7** 

6* 

2/7** 

2 

2 

7** 

6* 

2/7** 

2 

2/6 
2 

2 

5* 

6* 
2/5* 

2 
2/6* 

4 


7** 

6* 

2/7** 

2 

2/6** 
2 

2 

7** 

6* 

211** 

2 

2 

7** 

6* 

2/7** 

2 

2/6 
2 

2 
5* 
6* 

2/5* 

2 
2/6* 

4 


b 
b 
b 

b 

b 
b 
b 

b 
b 
b 

b 

b 
b 
b 

b 


h 
h 
h 

h 

h 
h 
h 

h 
h 
h 

h 

h 
h 
h 

h 


1 W 


mod reg r/m 








1 1 w 


mod reg r/m 








1 s W 


mod 10 r/m 


immediate data 








000101 0W 


immediate data 








1 1 1 1 1 1 1 w 


mod r/m 










10 reg 










1 1 d w 


mod reg r/m 




1 1 W 


mod reg r/m 






1 1 1 w 


mod reg r/m 










1 S W 


mod 10 1 r/m 


immediate data 








1 1 1 w 


immediate data 








1 1 d W 


mod reg r/m 








1 1 W 


mod reg r/m 








1 1 1 W 


mod reg r/m 








1 s w 


mod 11 r/m 


immediate data 








1 1 1 W 


immediate data 








1 1 1 1 1 1 1 w 


reg 1 r/m 










10 1 reg 










1 1 1 d w 


mod reg r/m 








1 1 1 W 


mod reg r/m 








1 1 1 1 w 


mod reg r/m 










1 S W 


mod 111 r/m 


immediate data 








1 1 1 1 W 


immediate data 








1 1 1 1 1 1 w 


mod 11 r/m 










110 111 











*lfCPL<IOPL **lfCPL>IOPL 
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Instruction 



Format 



Real 
Address 
Mode/ 
Virtual 



Protected 
Virtual 

Address 
Mode 



Real 

Address 

Mode/ 

Virtual 

8086 Mode 



AAS= ASCII Adjust for Subtract 
DAA s Decimal Adjust for Add 
DAS ■ Decimal Adjust for Subtract 
MUL= Multiply (unsigned) 

Accumulator with Register Memory 

Multiplier -Byte 
-Word 
-Doubleword 

IMUL = Integer Multiply (signed) 

Accumulator with Register Memory 

Multiplier -Byte 
-Word 
-Doubleword 

Register with Register/Memory 

Multiplier -Byte 
-Word 
-Doubleword 

Register/Memory with Immediate to Register 

-Word 
-Doubleword 

DIV= Divide (unsigned) 

Accumulator by Register/Memory 

Divisor -Byte 
-Word 

- Doubleword 

IDIV= Integer Divide (signed) 

Accumulator by Register/Memory 

Divisor -Byte 
-Word 

- Doubleword 



111111 



10 111 



10 1111 



1 1 1 1 o 1 1 w 



mod 10 r/m 



1 1 1 1 1 1 w 



mod 10 1 r/m 



1 1 1 1 



10 10 1111 



mod reg 



1 1 1 s 1 



mod reg r/m 



immediate data 



1 1 1 1 1 1 w 



mod 110 r/m 



1 1 1 1 1 1 w 



mod 111 r/m 



AAD= ASCII Adjust for Divide 110 10 10 1 

AAM= ASCII Adjust for Multiply 110 10 10 

CBW= Convert Byte to Word 10 110 

CWD= Convert Word to Double Word 10 110 1 

LOGIC 

Shift/Rotate Instruction 

Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 

Register/Memory by 1 1 1 1 w 



10 10 



10 10 



12-17/15-20* 
12-25/15-28* 
12-41/17-46* 



12-17/15-20* 
12-25/15-28* 
12-41/17-^*6* 



12-17/15-20* 
12-25/15-28* 
12-41/17-46* 



13-26 
13-42 



14/17 
22/25 
38/43 



2-17/15-20* 
2-25/15-28* 
2-41/17-46* 



2-17/15-20* 
2-25/15-28* 
2-41/17-^6* 



2-17/15-20* 
2-25/15-28* 
2-41/17-46* 



13-26/14-27 
13-42/16-45 



14/17 
22/25 
38/43 



b,d 
b,d 
b,d 



b,d 
b,d 
b,d 



b,d 
b,d 
b,d 



b,d 
b,d 



19/22 


19/22 


b, 


27/30 


27/30 


b, 


43/48 


43/48 


b, 


19 


19 




17 


17 




3 


3 




2 


2 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 








Instruction 


Format 


Clock Count 


Notes 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


LOGIC (continued) 

Not Through Carry (ROL, ROR, SAL, SAR, SH 

Register/Memory by CL 
Register/Memory by Immediate Count 
Through Carry (RCL and RCR) 
Register/Memory by 1 
Register/Memory by CL 
Register/Memory by Immediate Count 

SHLD = Shift Left Double 

Register/Memory by Immediate 

Register/Memory by CL 

SHRD = Shift Right Double 

Register/Memory by Immediate 

Register/Memory by CL 

AND = And 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

TEST = And Function to Flags, No Result 

Register/Memory and Register 

Immediate Data and Register/Memory 

Immediate Data and Accumulator (short form) 

OR = Or 

Register to Register 

Register to Memory 

Memory to Register 


L, and SHR) -(continued) 




3/7* 
3/7* 

9/10* 
9/10* 
9/10* 

3/7** 
3/7** 

3/7** 
3/7** 

2 

7** 
6* 
2/7* 

2 

2/5* 

2/5* 

2 

2 

7** 
6* 


3/7* 
3/7* 

9/10* 
9/10* 
9/10* 

3/7** 
3/7** 

3/7** 
3/7** 

2 

7** 

6* 

2/7** 

2 

2/5* 

2/5* 

2 

2 

7** 
6* 


b 
b 

b 
b 
b 

b 
b 
b 

b 
b 

b 
b 


h 
h 

h 
h 
h 

h 
h 
h 

h 
h 

h 
h 


1 1 1 1 W 


mod TTT r/m 










1 1 W 


mod TTT r/m 


(D 






1 1 1 W 


mod TTT r/m 










1 1 1 1 W 


mod TTT r/m 








1 1 W 


mod TTT r/m 


(1) 


TTT Instruction 

000 ROL 

001 ROR 

010 RCL 

011 RCR 

100 SHL/SAL 

101 SHR 
1 1 1 SAR 






1111 


10 10 10 


mod reg r/m 


(D 










1111 


10 10 10 1 


mod reg r/m 








1111 


10 10 110 


mod reg r/m 


0) 










1111 


10 10 110 1 


mod reg r/m 










1 d W 


mod reg r/m 










1 W 


mod reg r/m 








1 1 W 


mod reg r/m 










1 W 


mod 10 r/m 


immediate data 








1 1 W 


immediate data 








1 1 W 


mod reg r/m 








1 1 1 1 1 1 w 


mod r/m 


immediate data 








1 1 1 W 


immediate data 








1 d w 


mod reg r/m 










1 w 


mod reg r/m 










1 1 w 


mod reg r/m 











*lfCPL<IOPL **lfCPL>IOPL (1) Immediate 8-Bit Data 



Am386SX/SXL Microprocessor Data Sheet 



221 



H 



AMD 



Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 










Clock Count 


Notes 


Format 




Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


LOGIC (continued) 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

XOR = Exclusive Or 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 

Immediate to Accumulator (short form) 

NOT = Invert Register/Memory 

STRING MANIPULATION 

CMPS = Compare Byte/Word 

INS = Input Byte/Word from DX Port 

LODS = Load Byte/Word to AL/AX/EAX 

MOVE = Move Byte/Word 

OUTS = Output Byte/Word to DX Port 

SCAS = Scan Byte/Word 

STOS= Store Byte/Word from AL/AX/EX 

XLAT = Translate String 

REPEATED STRING MANIPULATION 

Repeated by Count in CX or ECX 

REPE C MPS = Compare String (Find non-match) 

REPNE CMPS = Compare String (Find match) 

REP INS= Input String 

REP LODS= Load String 

REP MOVS = Move String 

REP OUTS = Output String 

REPE SCAS=Scan String (Find n on- AL/AX/EAX) 

REPNE SCAS = Scan String (Find AL/AX/EAX) 

REP STOS= Store String 




immediate data 

immediate data 

Clock Count 

Virtual 8086 

Mode 


2/7** 
2 

2 

7** 

6* 
2/7** 

2 
2/6** 

10* 
15 

5 

7 
14 
7* 
4* 
5* 

5+9n** 
5+9n** 
13+6n* 
5+6n* 
7+4n* 
1 2+5n* 
5 + 8n* 
5 + 8n* 
5 + 5n* 


211** 
2 

2 
7** 

6* 
2/7** 

2 
2/6** 

10* 
9729** 

5* 

7** 
8728** 

7* 

4* 

5* 

5+9n** 

5+9n** 

7+6n7 
27+6n** 
5+6n* 

7+4n* 

6+5n7 
26+5n** 
5 + 8n* 

5 + 8n* 

5 + 5n* 


b 

b 
b 
b 

b 

b 
b 
b 
b 
b 
b 
b 

b 
b 
6 
b 
b 
b 
b 
b 
b 


h 

h 
h 
h 

h 

h 
s/t, h, m 

h 

h 
s/t, h, m 

h 

h 

h 

h 

h 
s/t, h, m 

h 

h 
s/t, h, m 

h 

h 

h 


1 w 


mod 1 r/m 






1 1 w 


immediate data 






1 1 d w 


mod reg r/m 




1 1 W 


mod reg r/m 




1 1 1 w 


mod reg r/m 




1 W 


mod 110 r/m 






1 1 1 W 


immediate data 






1 1 1 1 1 1 W 


mod 10 r/m 






1 1 1 1 W 












1 1 1 1 W 






29*** 










1 1 1 1 w 










1 1 1 w 












1 1 1 1 1 w 






28*** 










1 1 1 1 1 w 










1 1 1 1 W 








110 10 111 








11110 11 


1 1 1 1 w 




11110 10 


1 1 1 1 w 








11110 10 


1 1 1 1 w 




*** 








11110 10 


1 1 1 1 w 






11110 10 


1 1 1 w 








11110 10 


1 1 1 1 1 w 




*** 








11110 11 


1 1 1 1 1 w 






11110 10 


1 1 1 1 1 w 




11110 10 


1 1 1 1 w 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 



Formal 



Red 

Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 
Address 
Mode 



Notes 



Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 
Address 



BIT MANIPULATION 
BSF=Scan Bit Forward 
BSR = Scan Bit Reverse 
BT = Test Bit 

Register/Memory, Immediate 

Register/Memory, Register 

BTC = Test Bit and Complement 

Register/Memory, Immediate 

Register/Memory, Register 

BTR = Test Bit and Reset 

Register/Memory, Immediate 

Register/Memory, Register 

BTSsTestBitandSet 

Register/Memory, Immediate 

Register/Memory, Register 

CONTROL TRANSFER 

CALL = Call 

Direct Within Segment 

Register/Memory 

Indirect Within Segment 

Direct Intersegment 



10 11110 



mod reg 



10 11110 1 



mod reg r/m 



10 1110 10 



mod 10 r/m 



10 10 11 



mod reg 



10 1110 10 



mod 111 r/m 



10 1110 11 



mod reg r/m 



10 1110 10 



mod 1 1 r/m 



10 110 11 



mod reg r/m 



10 1110 10 



mod 10 1 r/m 



10 10 10 11 



mod reg r/m 



1110 10 



full displacement 



11111111 



mod 10 r/m 



10 110 10 



unsigned full offset, selector 



Protected Mode Only (Direct Intersegment) 
Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level (No Parameters) 
Via Call Gate to Different Privilege Level (x Parameters) 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386SX/SXL CPU TSS 
From 80286 Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 
From Am386SX/SXL CPU Task to 80286 TSS 
From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS 
From Am386SX/SXL CPU Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 

Indirect Intersegment 



11111111 



mod 11 r/m 



Protected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level (No Parameters) 
Via Call Gate to Different Privilege Level (x Parameters) 
From 80286 Task to 80286 TSS 
From 80286 Task to Am386SX/SXL CPU TSS 
From 80286 Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 
From Am386SX/SXL CPU Task to 80286 TSS 
From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS 
From Am386SX/SXL CPU Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 



10 + 3n* 
10 + 3n* 



3/6* 
3/12* 



6/8* 
6/13* 



6/8* 
6/13* 



6/8* 
6/13* 



7 + m*/ 
10 + m* 



10 + 3n* 
10 + 3n* 



3/6* 
3/12* 



6/8* 
6/13* 



6/8* 
6/13* 



9 + m*/ 
12 + m* 



64 + m 
98 + m 

106 + 8x + n 
285 
310 
229 
285 
392 
309 
46 + m 



68 + m 

102 + m 

110 + 8x+m 



j.k,r 



h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


,k,r 



h.j.k.r 



i.k.r 
k,r 
k,r 
k,r 
k,r 
k,r 

i.k.r 
k,r 
k,r 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 











Clock Count 


Notes 




Real 
Address 


Protected 


Real 
Address 


Protected 




Mode/ 


Virtual 


Mode/ 


Virtual 




Virtual 


Address 


Virtual 


Address 


Instruction Format 


8086 Mode 


Mode 


8086 Mode 


Mode 


CONTROL TRANSFER (continued) 










JMP = Unconditional Jump 






7 + m 
7 + m 
9 + m/ 


7 + m 
7 + m 
9 + m/ 


b 


r 

r 

h, r 


Short 


1110 10 11 


8-bit displacement 












Direct within Segment 


110 10 1 


full displacement 










Register/Memory 




mod 10 r/m 




Indirect Within Segment 


11111111 




14 + m 
16 + m 


14 + m 
31 +m 




j.k.r 










Direct Intersegment 


1110 10 10 


unsigned full offset, selector 


Protected Mode Only (Direct Intersegment) 






Via Call Gate to Same Privilege Level 




53 + m 




h,j,k,r 


From 80286 Task to 80286 TSS 








h,j,k,r 


From 80286 Task to Am386SX/SXL CPU TSS 








h.j.k.r 


From 80286 Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 








h,j,k,r 


From Am386SX/SXL CPU Task to 80286 TSS 








h,j,k,r 


From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS 








h.j.k.r 


From Am386SX/SXL CPU Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 




395 




h,j,k,r 








17 + m 


31 +m 
49 + m 


b 


h,j,k,r 
h,j,k,r 


Indirect Intersegment 


11111111 


mod 10 1 r/m 




Protected Mode Only (Indirect Intersegment) 






Via Call Gate to Same Privilege Level 








h,j.k,r 


From 80286 Task to 80286 TSS 








h,j, k,r 


From 80286 Task to Am386SX/SXL CPU TSS 








h.j.k.r 


From 80286 Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 








h.j.k.r 


From Am386SX/SXL CPU Task to 80286 TSS 




328 




h,j,k,r 


From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS 








h,j,k,r 


From Am386SX/SXL CPU Task to Virtual 8086 Task (Am386SX/SXL CPU TSS) 










RET= Return from Call 














12 + m 


b 


g.h.r 


Within Segment 
















110 11 






12 + m 


b 


g, h, r 


Within Segment Adding Immediate to SP 
















110 10 


16-bit displacement 






36 + m 


b 


g,h,j,k,r 


Intersegment 














110 10 11 






36 + m 


b 


g,h,j,k,r 


Intersegment Adding Immediate to SP 
















110 10 10 


16-bit displacement 






72 




h.j.k.r 


Protected Mode Only (RET): to Different Privileg 


3 Level 




Intersegment 




72 




h,j,k,r 


Intersegment Adding Immediate to SP 










CONDITIONAL JUMPS (Note: Times are Jump "Taken or Not Taken") 










JO = Jump on Overflow 


7 + m or 3 


7 + m or 3 




r 


8-bit Displacement 


















7 + m or 3 


7 + m or 3 




r 


Full Displacement 


1110 


8-bit displacement 




7 + m or 3 


7 + m or 3 




r 








JNO = Jump on Not Overflow 


1111 


1 


full displacement 








8-bit Displacement 


















7 + m or 3 


7 + m or 3 




r 


Full Displacement 


1110 1 


8-bit displacement 




















1111 


1 1 


full displacement 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 



Format 



Reel 
Address 



Protected 

Virtual 

Address 

Mode 



Real 
Address 



Protected 
Virtual 

Address 
Mode 



CONDITIONAL JUMPS (continued) 

JB/JNAE = Jump on Below/Not Above or Equal 

8-bit Displacement 
Full Displacement 



1110 10 



8-bit displacement 



1111 



10 10 



JNB/JAE = Jump on Not Below/Above or Equal 

8-bit Displacement 

Full Displacement 

JE/JZ = Jump on Equal/Zero 

8-bit Displacement 

Full Displacement 

JNE/JNZ = Jump on Not Equal/Not Zero 

8-bit Displacement 

Full Displacement 

JBE/JNA = Jump on Below or Equal/Not Above 

8-bit Displacement 

Full Displacement 



1110 11 



8-bit displacement 



1 1 1 1 



10 11 



1110 10 



8-bit displacement 



1111 



10 10 



1110 10 1 



8-bit displacement 



1111 



10 10 1 



1110 110 



8-bit displacement 



1111 



10 110 



JNBE/JA = Jump on Not Below or Equal/Above 

8-bit Displacement 

Full Displacement 

JS= Jump on Sign 

8-bit Displacement 

Full Displacement 

JNS = Jump on Not Sign 

8-bit Displacement 

Full Displacement 

JP/JPE = Jump on Parity/Parity Even 

8-bit Displacement 

Full Displacement 

JNP/JPO = Jump on Not Parity/Parity Odd 

8-bit Displacement 

Full Displacement 



1110 111 



8-bit displacement 



1111 



10 111 



11110 



8-bit displacement 



1111 



10 10 



11110 1 



8-bit displacement 



1111 



10 10 1 



11110 10 



8-bit displacement 



1111 



10 10 10 



11110 11 



8-bit displacement 



00001111 I 1 1 ' 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



full displacement 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 



7 + m or 3 
7 + m or 3 
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Instruction Format 


Clock Count 


Notes 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


CONDITIONAL JUMPS (continued) 

JL/JNGE = Jump on Less/Not Greater or Equal 


7 + m or 3 
7 + m or 3 

7 + m or 3 
7 + m or 3 

7 + m or 3 
7 + m or 3 

7 + m or 3 

7 + m or 3 

9 + m or 5 

9 + m or 5 

11+m 

11+m 

11+m 

4/5* 
4/5* 
4/5* 
4/5* 
4/5* 
4/5* 


7 + m or 3 
7 + m or 3 

7 + m or 3 
7 + m or 3 

7 + m or 3 
7+m or 3 

7 + m or 3 

7 + m or 3 

9 + m or 5 

9 + m or 5 

11+m 

11+m 

11+m 

4/5* 
4/5* 
4/5* 
4/5* 
4/5* 
4/5* 




h 
h 
h 
h 
h 
h 


8-bit Displacement 


111110 


8-bit displacement 












Full Displacement 


1111 


10 110 


full displacement 


JNL/JGEs Jump on Net Less/Greater or Equal 


8-bit Displacement 


111110 1 


8-bit displacement 












Full Displacement 


1111 


10 110 1 


full displacement 


JLE/JNG = Jump on Less or Equal/Not Great 


er 






8-bit Displacement 


1111110 


8-bit displacement 












Full Displacement 


1111 


10 1110 


full displacement 


JNLE/JG=Jump on Not Less or Equal/Great 


er 






8-bit Displacement 


1111111 


8-bit displacement 












Full Displacement 


1111 


10 1111 


full displacement 










JCXZ s J ump on CX Zero* 


1110 11 


8-bit displacement 












JECXZ = Jump on ECX Zero 


1110 11 


8-bit displacement 












LOOP = Loop CX Times 


1110 10 


8-bit displacement 












LOOPZ/LOOPE = Loop with Zero/Equal 


1110 1 


8-bit displacement 










I 


LOOPNZ/LOOPNE = Loop while Not Zero 


1110 


8-bit displacement 


CONDITIONAL BYTE SET (Note: Times Are 1 
SETO=Set Byte on Overflow 


Register/Memory) 








To Register/Memory 


1111 


10 10 


mod r/m 




SETNO = Set Byte on Not Overflow 








To Register/Memory 


1111 


10 10 1 


mod r/m 




SETB/SETNAE = Set Byte on Below/Not Abo 


ve or Equal 






To Register/Memory 


1111 


10 10 10 


mod r/m 




SETNB = Set Byte on Not Below/Above or Ec 


ual 






To Register/Memory 


1111 


10 10 11 


mod r/m 




SETE/SETZ = Set Byte on Equal/Zero 








To Register/Memory 


1111 


10 10 10 


mod r/m 




SETNE/SETNZ = Set Byte on Not Equal/Not 2 


ero 






To Register/Memory 


1111 


10 10 10 1 


mod r/m 













* Address Size Prefix differentiates JCXZ from JECXZ 
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Instruction 



Format 



Clock Count 



Notes 



Reed 

Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 

Address 
Mode 



Real 

Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 

Address 
Mode 



CONDITIONAL BYTE SET (continued) 

SETBE/SETNA = Set Byte on Below or Equal/Not Above 



To Register/Memory 


1111 


1 


10 110 


mod r/m 


SETNBE/SETA = Set Byte on Not Below or Equal/Above 


To Register/Memory 


1111 


1 


10 111 


mod r/m 


SETS = Set Byte on Sign 








To Register/Memory 


1111 


1 


110 


mod r/m 


SETNSsSet Byte on Not Sign 








To Register/Memory 


1111 


1 


110 1 


mod r/m 


SETP/SETPE = Set Byte on Parity/Parity Eve 


n 






To Register/Memory 


1111 


1 


110 10 


mod r/m 


SETNP/SETPO=Set Byte on Not Parity/Parit 


yOdd 






To Register/Memory 


1111 


1 


110 11 


mod r/m 


SETL/SETNGE = Set Byte on Less/Not Great 


er or Equal 






To Register/Memory 


1111 


1 


1110 


mod r/m 


SETNL/SETGE = Set Byte on Not Less/Great 


er or Equal 






To Register/Memory 


1111 


1 1 


1110 1 


mod r/m 


SETLE/SETNG = Set Byte on Less or Equal/h 


lot Greater 






To Register/Memory 


1111 


1 


11110 


mod r/m 


SETNLE/SETG = Set Byte on Not Less or Eq 


jal/Greater 






To Register/Memory 


1111 


10 11111 


mod r/m 










ENTER = Enter Procedure 


110 10 


16-bit displacement, 8-bit level 



L = 
L=1 
L>1 
LEAVE a Leave Procedure 

INTERRUPT INSTRUCTIONS 

INT = Interrupt: 

Type Specified 

Type 3 

INTO = Interrupt 4 if Overflow Flag Set 

If OF = 1 

lfOF = 



110 10 1 



110 110 1 



type 



110 110 



110 1110 



4/5* 



10 

14 

17 + 8(n-1) 



10 

14 

17 + 8(n-1) 



37 
33 



35 
3 



*lfCPL<IOPL **lfCPL>IOPL 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 










Instruction Format 


Clock Count 


Notes 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


INTERRUPT INSTRUCTIONS (continued) 










INT = Interrupt: 










Type Specified 










Type 3 






44 




b, e 


e.g.hj.k.r 


Bound = Interrupt 5 if Detected Value Out of Range 


1 10 10 


mod reg r/m 




If Out of Range 






If In Range 


10 


10 


b,e 


e,g,h,j,k,r 


Protected Mode Only (INT) 










INT: Type Specified 










Via Interrupt or Trap Gate to Same Privilege Level 










Via Interrupt or Trap Gate to Different Privilege Level 




71 




g, j, k, r 


From 80286 Task to 80286 TSS via Task Gate 




111 




g, j, k, r 


From 80286 Task to Am386SX/SXL CPU TSS via Task Gate 




438 




g, j, k, r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




465 




g,j.k,r 


From Am386SX/SXL CPU Task to 80286 TSS via Task Gate 




382 




g.j.k.r 


From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS via Task Gate 




440 




g,j,k,r 


From Am386SX/SXL CPU Task to Virtual 8086 Mode via Task Gate 




467 




g,j,k,r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




384 




g.j.k.r 


From Virtual 8086 Mode to Am386SX/SXL CPU TSS via Task Gate 




445 




g,j,k,r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




472 
275 




g,j.k,r 
g,j,k,r 


INT: Type 3 










Via Interrupt or Trap Gate to Same Privilege Level 










Via Interrupt or Trap Gate to Different Privilege Level 




71 




g, j, k, r 


From 80286 Task to 80286 TSS via Task Gate 




111 




g, j, k, r 


From 80286 Task to Am386SX/SXL CPU TSS via Task Gate 




382 




g.j, k,r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




409 




g.j. k, r 


From Am386SX/SXL CPU Task to 80286 TSS via Task Gate 




326 




g,j,k,r 


From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS via Task Gate 




384 




g, j, k, r 


From Am386SX/SXL CPU Task to Virtual 8086 Mode via Task Gate 




411 




g.j. k, r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




328 




g, j, k, r 


From Virtual 8086 Mode to Am386SX/SXL CPU TSS via Task Gate 




389 




9,1, k, r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




416 
223 




g.j. k, r 
g.j. k, r 


INTO 










Via Interrupt or Trap Gate to Same Privilege Level 










Via Interrupt or Trap Gate to Different Privilege Level 




71 




g 


j.kr 


From 80286 Task to 80286 TSS via Task Gate 




111 




g 


j.kr 


From 80286 Task to Am386SX/SXL CPU TSS via Task Gate 




384 




g 


j,k,r 


From 80286 Task to Virtual 8086 Mode via Task Gate 




411 




g 


j.k.r 


From Am386SX/SXL CPU Task to 80286 TSS via Task Gate 




328 




g 


j,k,r 


From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS via Task Gate 




Am386DX 




g 


j. k, r 


From Am386SX/SXL CPU Task to Virtual 8086 Mode via Task Gate 




413 




g 


j.k.r 


From Virtual 8086 Mode to 80286 TSS via Task Gate 




329 




g 


j.k.r 


From Virtual 8086 Mode to Am386SX/SXL CPU TSS via Task Gate 




391 




g 


J.k,r 


From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 




418 
223 




g 
g 


j,k,r 
j.k.r 


BOUND 










Via Interrupt or Trap Gate to Same Privilege Level 










Via interrupt or Trap Gate to Different Privilege Level 




71 




g.j.k.r 


From 80286 Task to 80286 TSS via Task Gate 




111 




g.j. k, r 


From 80286 Task to Am386SX/SXL CPU TSS via Task Gate 




358 
388 




g.j. k, r 

g.j.k.r 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 



Instruction 



Format 



Clock Count 



Address 

Mode/ 

Virtual 

8086 Mode 



Protected 

Virtual 

Address 

Mode 



Address 

Mode/ 

Virtual 

8086 Mode 



Protected 
Virtual 
Address 



INTERRUPT INSTRUCTIONS (continued) 

BOUND (continued) 

From 80286 Task to Virtual 8086 Mode via Task Gate 

From Am386SX/SXL CPU Task to 80286 TSS via Task Gate 

From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS via Task Gate 

From Am386SX/SXL CPU Task to Virtual 8086 Mode via Task Gate 

From Virtual 8086 Mode to 80286 TSS via Task Gate 

From Virtual 8086 Mode to Am386SX/SXL CPU TSS via Task Gate 

From Virtual 8086 Mode to Privilege Level via Trap Gate or Interrupt Gate 



INTERRUPT RETURN 
I RET = Interrupt Return 



110 1111 



Protected Mode Only (IRET) 

Via Interrupt or Trap Gate to Same Privilege Level (within Task) 

Via Interrupt or Trap Gate to Different Privilege Level (within Task) 

From 80286 Task to 80286 TSS 

From 80286 Task to Am386SX/SXL CPU TSS 

From 80286 Task to Virtual 8086 Task 

From 80286 Task to Virtual 8086 Mode (within Task) 

From Am386SX/SXL CPU Task to Virtual 8086 TSS 

From Am386SX/SXL CPU Task to 80286 TSS 

From Am386SX/SXL CPU Task to Am386SX/SXL CPU TSS 

From Am386SX/SXL CPU Task to Virtual 8086 Mode (within Task) 



PROCESSOR CONTROL 
HLT = Halt 



11110 10 



MOV=MoveTo and From Control/Debug/Test Registers 

CR0/CR2/CR3 from Register 

Register from CR3-CR0 

DR3-DR0 from Register 

DR7-DR6 from Register 

Register from DR7-DR6 

Register from DR3-DR0 

TR7-TR6 from Register 

Register from TR7-TR6 

NOP = No Operation 

WAIT = Wait until BUSY pin is negated 

PROCESSOR EXTENSION INSTRUCTIONS 

Processor Extension Escape 

PREFIX BYTES 

Address Size Prefix 



1111 


10 10 


1 1 eee reg 




1111 


1 


1 1 eee reg 




1111 


10 11 


1 1 eee reg 




1111 


10 11 


1 1 eee reg 




1111 


1 1 


1 1 eee reg 




1111 


1 1 


1 1 eee reg 




1111 


10 110 


1 1 eee reg 




1111 


10 10 


1 1 eee reg 



10 10 



10 110 11 



1 1 1 1 TT T 



mod L L L r/m 



TTT and LLL bits are op-code information for coprocessor. 



110 111 



1 0/4/5 

5 

22 
16 
14 
22 
12 
12 

3 



See 387SX 
Data sheet 
for clock 
counts 



335 




g,j,k,r 


368 




g,j,k,r 


398 




g.j.k.r 


347 




g.j.k.r 


368 




g.j.k.r 


398 




g.j.k.r 


223 




g.j.k.r 



285 
318 
267 
113 
324 
328 
377 
113 



1 0/4/5 

6 

22 
16 
14 
22 
12 
12 

3 

6 



g,h,j,k,r 



g,h,j,k,r 


g.r 


,j,k,r 


h, 


,k,r 


h, 


,k,r 


h, 


, k, r 


h. 


. k. r 


h, 


,k,r 


h, 


, k,r 


h, 


,k,r 


h, 


,k,r 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 








instruction Format 


Clock Count 


Notes 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 
Virtual 

Address 
Mode 


PREFIX BYTES (continued) 
















N/A 
N/A 
11* 
11* 
N/A 
10/13 

N/A 
N/A 

N/A 

9* 

9* 












20/21 ** 
15/16* 

11* 

11* 
20/24* 
10/13* 

20/21 * 
25/26* 

23/27* 

9* 

9* 


a 

a 

b,c 
b,c 

a 
b,c 

a 
a 

a 

b,c 

b,c 


m 

h 
g.h.j.p 

h.l 

h. I 
g.h.],i 

h,l 

g.h,j,p 
g.h.j.p 

g.h.jJ 

h 

h 


LOCK= Bus Lock Prefix 


11110 








Operand Size Prefix 


110 110 


Segment Override Prefix 






CS 
DS 
ES 
FS 
GS 
SS 


10 1110 




111110 


10 110 


110 10 


110 10 1 


110 110 


PROTECTION CONTROL 

ARPLs Adjust Requested Privilege Level 








From Register/Memory 


110 11 


mod reg r/m 




LAR = Load Access Rights 








From Register/Memory 


1111 


10 


mod reg r/m 




LGDTs Load Global Descriptor 






Table Register 


1111 


1 


mod 10 r/m 




LIDT = Load Interrupt Descriptor 






Table Register 


1111 


1 


mod 11 r/m 




LLDTssLoad Local Descriptor 






Table Register to Register/Memory 


1111 


00000000 


mod 10 r/m 




LMSW= Load Machine Status Word 






From Register/Memory 


1111 


1 


mod 1 1 r/m 




LSL = Load Segment Limit 






From Register/Memory 


1111 


1 1 


mod reg r/m 




Byte-Granular Limit 
Page-Granular Limit 

LTR = Load Task Register 






From Register/Memory 


1111 


00000000 


mod 1 r/m 




SGDT = Store Global Descriptor 






Table Register 


1111 


1 


mod r/m 




SIDT= Store Interrupt Descriptor 






Table Register 


1111 


1 


mod 1 r/m 











*lfCPL<IOPL **lfCPL>IOPL 
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Am386SX/SXL Instruction Set Clock Count Summary (continued) 








Instruction Format 


Clock Count 


Notes 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


Real 

Address 

Mode/ 

Virtual 

8086 Mode 


Protected 

Virtual 

Address 

Mode 


PROTECTION CONTROL (continued) 

SLDT = Store Local Descriptor Table Register 




N/A 

2/2* 

N/A 

N/A 
N/A 


2/2* 
2/2* 

2/2* 

10/11* 
15/16* 


a 
b,c 

a 

a 
a 


h 
h,l 

h 

g.h.j, p 
g,h,j,p 


To Register/Memory 


1111 


00000000 


mod r/m 














SMSW = Store Machine Status Word 


1111 


1 


mod 10 r/m 




STR = Store Task Register 






To Register/Memory 


1111 


00000000 


mod 1 r/m 




VERR = Verify Read Access 






Register/Memory 


1111 


00000000 


mod 10 r/m 












VERW= Verify Write Access 


1111 


00000000 


mod 10 1 r/m 




* If CPL<IOPL ** If CPL>IOPL 







Instruction Notes for Instruction Set Summary 
Notes a through c apply to Real Address Mode only: 

a. This is a Protected Mode instruction. Attempted execution in Real Mode will result in Exception 6 (invalid op-code). 

b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully extends beyond the 
maximum CS, DS, ES, FS, or GS limit (FFFFH). Exception 1 2 fault (stack segment limit violation or not present) will occur in Real Mode if an 
operand reference is made that partially or fully extends beyond the maximum SS limit. 

c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to initialize the CPU for Protected Mode. 
Notes d through g apply to Real Address Mode and Protected Virtual Address Mode: 

d. The Am386SX/SXL CPU uses an early -out multiply algorithm. The actual number of clocks depends on the position of the most significant bit 
in the operand (multiplier). 

Clock counts given are minimum to maximum. To calculate actual clocks use the following formula: 
Actual Clock = if m <> 0, then max ([log2 \m\], 3) + b clocks; 

= if m = 0, then 3 + b clocks 
In this formula, m is the multiplier, and 
b = 9 for register to register; 
b = 1 2 for memory to register; 
b = 10 for register with immediate to register; 
b = 1 1 for memory with immediate to register. 

e. An exception may occur, depending on the value of the operand. 

f. LOCK is automatically asserted, regardless of the presence or absence of the LOCK prefix. 

g. LOCK is asserted during descriptor table accesses. 

Notes h through r apply to Protected Virtual Address Mode only: 

h. Exception 13 fault will occur if the memory operand in CS, DS, ES, FS, or GS cannot be used due to either a segment limit violation or an 

access rights violation. If a stack limit is violated, an Exception 12 occurs, 
i. For segment load operations, the CPL, RPL, and DPL must agree with the privilege rules to avoid an Exception 13 fault. The segment's 

descriptor must indicate "present" or Exception 1 1 (CS, DS, ES, FS, GS not present). If the SS register is loaded and a stack segment not 

present is detected, an Exception 12 occurs, 
j. All segment descriptor accesses in the GDT or LDT made by this instruction will automatically assert LOCK to maintain descriptor integrity in 

multiprocessor systems, 
k. JMP, CALL, INT, RET, and IRET instructions referring to another code segment will cause an Exception 13, if an applicable privilege rule is 

violated. 
I. An Exception 1 3 fault occurs if CPL is greater than (0 is the most privileged level), 
m. An Exception 13 fault occurs if CPL is greater than IOPL 

n. The IF bit of the flag register is not updated if CPL is greater than IOPL. The IOPL and VM fields of the flag register are updated only if CPL =0. 
o. The PE bit of the MSW (CR0) cannot be reset by this instruction. Use MOV into CR0 if desiring to reset the PE bit. 
p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero flag is cleared, 
q. If the coprocessor's memory operand violates a segment limit or segment access rights, an Exception 13 fault will occur before the ESC 

instruction is executed. An Exception 1 2 fault will occur if the stack limit is violated by the operand's starting address, 
r. The destination of a JMP, CALL, INT, RET, or IRET must be in the defined limit of a code segment or an Exception 13 fault will occur. 
s/t. The instruction will execute in s clocks if CPL < IOPL. If CPL > IOPL, the instruction will take t clock. 



Am386SX/SXL Microprocessor Data Sheet 



231 



a 



AMD 



Instruction Encoding 

Overview 

All instruction encodings are subsets of the general 
instruction format shown in the Am386SX/SXL Instruc- 
tion Set Clock Count Summary (pages 217 thru 231). 
Instructions consist of one or two primary op-code 
bytes, possibly an address specifier consisting of the 
mod r/m byte and scaled index byte, a displacement if 
required, and an immediate data field if required. 

Within the primary op-code(s), smaller encoding fields 
may be defined. These fields vary according to the class 
of operation. The fields define such information as 
direction of the operation, size of the displacements, 
register encoding, or sign extension. 

Almost all instructions referring to an operand in 
memory have an addressing mode byte following the 
primary op-code byte(s). This byte (mod r/m) specifies 
the address mode to be used. Certain encodings of the 
mod r/m byte indicate a second addressing byte 
(scale-index-base byte) follows the mod r/m byte to fully 
specify the addressing mode. 

Addressing modes can include a displacement 
immediately following the mod r/m byte, or scaled index 
byte. If a displacement is present, the possible sizes are 
8, 16, or 32 bits. 

If the instruction specifies an immediate operand, the 
immediate operand follows any displacement bytes. 
The immediate operand, if specified, is always the last 
field of the instruction. 

Figure 57 illustrates several of the fields that can appear 
in an instruction, such as the mod field and the r/m field, 



but Figure 57 does not show all fields. Several smaller 
fields also appear in certain instructions, sometimes 
within the op-code bytes themselves. Table 22 is a 
complete list of all fields appearing in the Instruction Set. 
Further ahead, following Table 22, are detailed tables 
for each field. 

32-Bit Extensions of the Instruction Set 

With the Am386SX/SXL CPU, the 8086/80186/80286 
Instruction Set is extended in two orthogonal directions: 
32-bit forms of all 16-bit instructions are added to 
support the 32-bit data types; and, 32-bit addressing 
modes are made available for all instructions referenc- 
ing memory. This orthogonal instruction set extension is 
accomplished having a Default (D) bit in the code seg- 
ment descriptor, and by having 2 prefixes to the 
instruction set. 

Whether the instruction defaults to operations of 1 6 bits 
or 32 bits depends on the setting of the D bit in the code 
segment descriptor, which gives the default length 
(either 32 bits or 1 6 bits) for both operands and effective 
addresses, when executing that code segment. In the 
Real Address Mode or Virtual 8086 Mode, no code 
segment descriptors are used, but a D value of is 
assumed internally by the Am386SX/SXL CPU when 
operating in those modes (for 16-bit default sizes 
compatible with the 8086/80186/80286). 

Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective ad- 
dress size. These prefixes may precede any op-code 
bytes and affect only the instruction they precede. If 
necessary, one or both of the prefixes may be placed 



Table 22. Fields within Instructions 



Field Name 


Description 


Number of Bits 


w 
d 
s 


Specifies if data is byte or full size (full size is either 16 or 32 bits) 

Specifies direction of data operation 

Specifies if an immediate data field must be sign-extended 


1 
1 
1 


reg 

mod r/m 
ss 


General Register Specifier 

Address Mode Specifier (effective address can be a General Register) 

Scale Factor for Scaled Index Address Mode 


3 

2 for mod; 3 for r/m 

2 


index 
base 
sreg2 
sreg3 
tttn 


General Register to be used as Index Register 

General Register to be used as Base Register 

Segment Register Specifier for CS, SS, DS, and ES 

Segment Register Specifier for CS, SS, DS, ES, FS, and GS 

For Conditional Instructions, specifies a condition asserted or a condition negated 


3 
3 
2 
3 
4 



Note: Table 21 shows encoding of individual instructions. 



TTTTTTTT 


TTTTTTTT 


mod T T T r/m 


ss index 


base 


d32 | 1 6 | 8 | nor 


ie dat 
JK 


a32 | 1 6 I 8 | none 


J 7 


°A 


7 6 5 3 2 0, 

v ' 

mod r/m 
byte 


,7653 


2 0, 


* 


J 


op-code 
(one or two bytes) 




s-i-b 
byte 


-^ 


address 
. displacement 
(4, 2, 1 bytes, 
or none) 

nat 


V 

immediate 

data 

(4, 2, 1 bytes, 

or none) 

15022B-041 


(T represents a 


in op-code bit) 


register and address 
mode specifier 

: igure 57. General instruction Fori 
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before the op-code bytes. The presence of the Operand 
Size Prefix and the Effective Address Prefix will toggle 
the operand size or the effective address size, 
respectively, to the value opposite from the Default 
setting. For example, if the default operand size is for 
32-bit data operations, then presence of the Operand 
Size Prefix toggles the instruction to 16-bit data 
operation. As another example, if the default effective 
address size is 16 bits, presence of the Effective 
Address Size prefix toggles the instruction to use 
32-bit effective address computations. 

These 32-bit extensions are available in all modes, 
including the Real Address Mode and the Virtual 8086 
Mode. In these modes the default is always 16 bits, so 
prefixes are needed to specify 32-bit operands or 
addresses. For instructions with more than one prefix, 
the order of prefixes is unimportant. 

Unless specified otherwise, instructions with 8-bit and 
16-bit operands do not affect the contents of the 
high-order of the extended registers. 

Encoding of Instruction Fields 

Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immediately 
ahead. 

Encoding of Operand Length (w) Field 

For any given instruction performing a data operation, 
the instruction is executing as a 32-bit operation or a 
16-bit operation. Within the constraints of the operation 
size, the w field encodes the operand size as either one 
byte or the full operation size, as shown in the table 
below. 



Encoding of reg Field When w Field is 
Present in Instruction 



w Field 


Operand Size 

During 16-Bit 

Data Operations 


Operand Size 

During 32-Bit 

Data Operations 




1 


8 Bits 
1 6 Bits 


8 Bits 
32 Bits 



Encoding of the General Register (reg) Field 

The general register is specified by the reg field, which 
may appear in the primary op-code bytes, or as the reg 
field of the mod r/m byte, or as the r/m field of the mod 
r/m byte. 

Encoding of reg Field When w Field is not 
Present in Instruction 



reg Field 


Register Selected 

During 16-Bit 
Data Operations 


Register Selected 

During 32-Bit 
Data Operations 


000 


AX 


EAX 


001 


CX 


ECX 


010 


DX 


EDX 


011 


BX 


EBX 


100 


SP 


ESP 


101 


BP 


EBP 


101 


Si 


ESI 


101 


DI 


EDI 



Register Specified by reg Field 
During 16-Bit Data Operations 


reg 


Function of w Field 


(when w = 0) 


(when w= 1) 


000 


AL 


AX 


001 


CL 


CX 


010 


DL 


DX 


011 


BL 


BX 


100 


AH 


SP 


101 


CH 


BP 


110 


DH 


SI 


111 


BH 


DI 



Register Specified by reg Field 
During 32-Bit Data Operations 


reg 


Function of w Field 


(when w = 0) 


(when w= 1) 


000 
001 
010 
011 
100 
101 
110 

111 


AL 
CL 
DL 
BL 
AH 
CH 
DH 
BH 


EAX 
ECX 

EDX 

EBX 

ESP 

EBP 

ESI 

EDI 



Encoding of the Segment Register (sreg) Field 

The sreg field in certain instructions is a 2-bit field, allow- 
ing one of the four 80286 segment registers to be 
specified. The sreg field in other instructions is a 3-bit 
field, allowing the Am386SX/SXL CPU FS and GS 
segment registers to be specified. 

2-Bit sreg2 Field 



2-Bit sreg2 Field 


Segment Register Selected 


00 
01 
10 

11 


ES 
CS 
SS 
DS 



3-Bit sreg3 Field 



3-Bit sreg3 Field 


Segment Register Selected 


000 


ES 


001 


CS 


010 


SS 


011 


DS 


100 


FS 


101 


GS 


110 


do not use 


111 


do not use 
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Encoding of Address Mode 

Except for special instructions, such as PUSH or POP, 
where the addressing mode is predetermined, the ad- 
dressing mode for the current instruction is specified by 
addressing bytes following the primary op-code. The 
primary addressing byte is the mod r/m byte, and a sec- 
ond byte of addressing information, the s-i-b (scale-in- 
dex-base) byte, can be specified. 

The s-i-b byte is specified when using 32-bit addressing 
mode, the mod r/m byte has r/m = 1 00, and mod = 00, 
01 , or 1 0. When the s-i-b byte is present, the 32-bit ad- 
dressing mode is a function of the mod, ss, index, and 
base fields. 

The primary addressing byte, the mod r/m byte, 
also contains three bits (shown as TTT in Figure 57) 



sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as a 
register field (reg). 

When calculating an effective address, either 16-bit ad- 
dressing or 32-bit addressing is used. 1 6-bit addressing 
uses 16-bit address components to calculate the effec- 
tive address, while 32-bit addressing uses 32-bit ad- 
dress components to calculate the effective address. 
When 16-bit addressing is used, the mod r/m byte is in- 
terpreted as a 1 6-bit addressing mode specifier. When 
32-bit addressing is used, the mod r/m byte is inter- 
preted as a 32-bit addressing mode specifier. 

Tables on the following pages define all encodings of all 
16-bit addressing modes and 32-bit addressing modes. 



Encoding of 16-Bit Address Mode with mod r/m Byte 



mod r/m 


Effective Address 


00 000 


DS:[BX + SI] 


00 001 


DS:[BX+DI] 


00 010 


SS:[BP + SI] 


00 011 


DS:[BP + DI] 


00 100 


DS:[SI] 


00 101 


DS:[DI] 


00 110 


DS:d16 


00 111 


DS:[BX] 


01 000 


DS:[BX + SI + d8] 


01 001 


DS:[BX + Dl + d8] 


01 010 


SS:[BP + SI + d8] 


01 011 


SS:[BP + Dl + d8] 


01 100 


DS:[SI + d8] 


01 101 


DS:[DI + d8] 


01 110 


SS:[BP + d8] 


01 111 


DS:[BX + d8] 



mod r/m 


Effective Address 


10 


000 


DS:[BX + SI + d16] 


10 


001 


DS:[BX + DI + d16] 


10 


010 


SS:[BP + SI + d16] 


10 


011 


SS:[BP + SI + d16] 


10 


100 


DS:[SI + d16] 


10 


101 


DS:[DI + d16] 


10 


110 


SS:[BP + d16] 


10 


111 


DS:[BX + d16] 


11 


000 


Register — See Below 


11 


001 


Register — See Below 


11 


010 


Register — See Below 


11 


011 


Register — See Below 


11 


100 


Register — See Below 


11 


101 


Register — See Below 


11 


110 


Register — See Below 


11 


111 


Register — See Below 



Register Specified by r/m 
During 16-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w = 1 ) 


11 000 
11 001 
11 010 
11 011 
11 100 
11 101 
11 110 

11 111 


AL 
CL 
DL 
BL 
AH 
CH 
DH 
BH 


AX 
CX 
DX 
BX 

SP 
BP 
SI 
Dl 



Register Specified by r/m 
During 32-Bit Data Operations 



mod r/m 



11 000 

11 001 

11 010 

11 011 

11 100 

11 101 

11 110 

11 111 



Function of w Field 



(when w = 0) 



AL 
CL 
DL 
BL 
AH 
CH 
DH 
BH 



(when w = 1) 



EAX 
ECX 

EDX 

EBX 

ESP 

EBP 

ESI 

EDI 
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Encoding of 32-Bit Address Mode with mod r/m Byte (no s-i-b byte present) 



mod r/m 


Effective Address 


00 000 


DS:[EAX] 


00 001 


DS:[ECX] 


00 010 


DS:[EDX] 


00 011 


DS:[EBX] 


00 100 


s-i-b is present 


00 101 


DS:d32 


00 110 


DS:[ESI] 


00 111 


DS:[EDI] 


01 000 


DS:[EAX + d8] 


01 001 


DS:[ECX + d8] 


01 010 


DS:[EDX + d8] 


01 011 


DS:[EBX + d8] 


01 100 


s-i-b is present 


01 101 


SS:[EBP + d8] 


01 110 


DS:[ESI + d8] 


01 111 


DS:[EDI + d8] 



mod r/m 


Effective Address 


10 000 


DS:[EAX + d32] 


10 001 


DS:[ECX + d32] 


10 010 


DS:[EDX + d32] 


10 011 


DS:[EBX + d32] 


10 100 


s-i-b is present 


10 101 


SS:[EBP + d32] 


10 110 


DS:[ESI + d32] 


10 111 


DS:[EDI + d32] 


11 000 


Register — See Below 


11 001 


Register — See Below 


11 010 


Register — See Below 


11 011 


Register — See Below 


11 100 


Register — See Below 


11 101 


Register — See Below 


11 110 


Register — See Below 


11 111 


Register — See Below 



Register Specified by reg or r/m 
During 32-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w= 1) 


11 000 


AL 


EAX 


11 001 


CL 


ECX 


11 010 


DL 


EDX 


11 011 


BL 


EBX 


11 100 


AH 


ESP 


11 101 


CH 


EBP 


11 110 


DH 


ESI 


11 111 


BH 


EDI 



Register Specified by reg or r/m 


During 16-Bit Data Operations 


mod r/m 


Function of w Field 


(when w = 0) 


(when w= 1) 


11 000 


AL 


AX 


11 001 


CL 


CX 


11 010 


DL 


DX 


11 011 


BL 


BX 


11 100 


AH 


SP 


11 101 


CH 


BP 


11 110 


DH 


SI 


11 111 


BH 


Dl 
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Encoding of 32-Bit Address Mode (mod r/m byte and s-i-b byte present): 



mod base 


Effective Address 


00 000 
00 001 
00 010 
00 011 
00 100 
00 101 
00 110 

00 111 

01 000 
01 001 
01 010 
01 011 
01 100 
01 101 
01 110 
01 111 

10 000 
10 001 
10 010 
10 011 
10 100 
10 101 
10 110 
10 111 


DS:[EAX + (scaled index)] 
DS:[ECX + (scaled index)] 
DS:[EDX + (scaled index)] 
DS:[EBX + (scaled index)] 
SS:[ESP + (scaled index)] 
DS:[d32 + (scaled index)] 
DS:[ESI + (scaled index)] 
DS:[EDI + (scaled index)] 

DS:[EAX + (scaled index) + d8] 
DS:[ECX + (scaled index) + d8] 
DS:[EDX + (scaled index) + d8] 
DS:[EBX + (scaled index) + d8] 
SS:[ESP + (scaled index) + d8] 
SS:[EBP + (scaled index) + d8] 
DS:[ESI + (scaled index) + d8] 
DS:[EDI + (scaled index) + d8] 

DS:[EAX + (scaled index) + d32] 
DS:[ECX + (scaled index) + d32] 
DS:[EDX + (scaled index) + d32] 
DS:[EBX + (scaled index) + d32] 
SS:[ESP + (scaled index) + d32] 
SS:[EBP + (scaled index) + d32] 
DS:[ESI + (scaled index) + d32] 
DS:[EDI + (scaled index) + d32] 



ss 


Scale Factor 


00 
01 
10 

11 


x1 
x2 
x4 
x8 



Index 


Index Register 


000 


EAX 


001 


ECX 


010 


EDX 


011 


EBX 


100 


no index reg (see note) 


101 


EBP 


110 


ESI 


111 


EDI 



Note: When index field is 100, indicating no index register, then ss 
field must equal 00. If index is 100 and ss does not equal 00, 
the effective address is undefined. 



Note: Mod field in mod r/m byte; ss, index, and base fields in s-i-b byte. 
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Encoding of Operation Direction (d) Field 

In many two-operand instructions, the d field is present 
to indicate which operand is considered the source and 
which is the destination. 



Direction of Operation 



Register/Memory <= Register 

reg Field indicates Source Operand; 

mod r/m or mod ss index base indicates Destination 

Operand. 



Register <= Register/Memory 

reg Field indicates Destination Operand; 

mod r/m or mod ss index base indicates Source 

Operand. 



Encoding of Sign-Extend (s) Field 

The s field occurs primarily to instructions with immedi- 
ate data fields. The s field has an effect only if the size of 
the immediate data is 8 bits and is being placed in a 
16-bit or 32-bit destination. 



s 


Effect on 
Immediate Data8 


Effect on 
Immediate Data 16|32 





None 


None 


1 


Sign-Extended Data8 to Fill 
1 6-Bit or 32-Bit Destination 


None 



Encoding of Conditional Test (tttn) Field 

For the conditional instructions (conditional jumps and 
set on condition), tttn is encoded with n indicating to 
use the condition (n = 0), or its negation (n = 1), and 
ttt giving the condition to test. 



Mnemonic 


Condition 


tttn 


O 


Overflow 


0000 


NO 


No Overflow 


0001 


B/NAE 


Below/Not Above or Equal 


0010 


NB/AE 


Not Below/Above or Equal 


0011 


E/Z 


Equal/Zero 


0100 


NE/NZ 


Not Equal/Not Zero 


0101 


BE/NA 


Below or Equal/Not Above 


0110 


NBE/A 


Not Below or Equal/Above 


0111 


S 


Sign 


1000 


NS 


Not Sign 


1001 


P/PE 


Parity/Parity Even 


1010 


NP/PO 


No Parity/Parity Odd 


1011 


L/NGE 


Less Than/Not Greater or Equal 


1100 


NL/GE 


Not Less Than/Greater or Equal 


1101 


LE/NG 


Less Than or Equal/Not Greater Than 


1110 


NLE/G 


Not Less Than or Equal/Greater Than 


1111 



Encoding of Control or Debug or Test Register (eee) 
Field 

For the loading and storing of the Control, Debug, and 
Test registers. 

When Interpreted as Control Register Field 



eee Code 


Reg Name 


000 
010 
011 


CR0 
CR2 
CR3 


Do not use any other encoding 



When Interpreted as Debug Register Field 



eee Code 


Reg Name 


000 


DR0 


001 


DR1 


010 


DR2 


011 


DR3 


110 


DR6 


111 


DR7 


Do not use any other encoding 



When Interpreted as Test Register Field 



eee Code 


Reg Name 


110 
111 


TR6 
TR7 


Do not use any other encoding 



Am386SX/SXL Microprocessor Data Sheet 



237 



a 



AMD 



PHYSICAL DIMENSIONS 

For reference only. All dimensions measured in inches unless otherwise noted. BSC is an ANSI standard for Basic 
Space Centering. 

PQB 100— Plastic Quad Flat Pack; Trimmed and Formed 
(all measurements are in inches) 



0.897 



0.875 



0.903 



0.747 



0.885 



0.753 



.mmmmmmmm 



50* 
51 




0.012 



Top View 




"H 0.020 0.180 

0.040 



Side View 



15679G 
CF43 
7/16/92 SG 
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PHYSICAL DIMENSIONS (continued) 



PQB 100— Plastic Quad Flat Pack with Molded Carrier Ring 
(Inner device measured in inches; outer ring measured in millimeters) 



45.87 




45 Typ 



TOP VIEW 



.025 NOM 



.65 Pitch 

r 



it 

•65 Typ ~f [Q D D D 

Tr 



■ — ■ 



H <£ 



/ I I 



I Jllll J 



1 1 1 1 1 III 1 1 1 III 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 



\ j ! 







4.80 



SIDE VIEW 






15680D 
CB51 
7/16/92 SG 
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North American 

ALABAMA (205)882-9122 

ARIZONA (602)242-4400 

CALIFORNIA, 

Culver City (310) 645-1524 

Newport Beach (714) 752-6262 

Sacramento(Roseville) (916) 786-6700 

San Diego (619) 560-7030 

San Jose (408) 452-0500 

Woodland Hills (818) 992-4155 

CANADA, Ontario, 

Kanata (613)592-0060 

Willowdale (416)222-7800 

COLORADO (303)741-2900 

CONNECTICUT (203) 264-7800 

FLORIDA, 

Clearwater (813) 530-9971 

Ft. Lauderdale (305) 776-2001 

Orlando (Longwood) (407)862-9292 

GEORGIA (404)449-7920 

IDAHO (208)377-0393 

ILLINOIS, 

Chicago (Itasca) (708) 773-4422 

Naperville (708) 505-9517 

MARYLAND (301)381-3790 

MASSACHUSETTS (617) 273-3970 

MINNESOTA (612) 938-0001 

NEW JERSEY, 

Cherry Hill (609)662-2900 

Parsippany (201) 299-0002 

NEW YORK, 

Brewster (914)279-8323 

Rochester (716)425-8050 

NORTH CAROLINA 

Charlotte (704) 875- 3091 

Raleigh (919) 878-8111 

OHIO, 

Columbus (Westerville) (614) 891-6455 

Dayton (513)439-0268 

OREGON (503)245-0080 

PENNSYLVANIA (215)398-8006 

TEXAS, 

Austin (512)346-7830 

Dallas (214)934-9099 

Houston (713)376-8084 

International 



BELGIUM, Antwerpen TEL (03) 248 43 00 

FAX (03) 248 46 42 

FRANCE, Paris TEL (1) 49-75-10-10 

FAX (1)49-75-10-13 

GERMANY, 

Bad Homburg TEL (06172)-24061 

FAX (06172)-23195 

Munchen TEL (089)4114-0 

FAX (089)406490 

HONG KONG TEL (852) 865-4525 

Wanchai FAX (852) 865-4335 

ITALY, Milano TEL (02) 3390541 

FAX (02) 38103458 

JAPAN, 

Atsugi TEL (0462)29-8460 

FAX (0462) 29-8458 

Kanagawa TEL (0462) 47-291 1 

FAX (0462) 47-1729 

Tokyo TEL (03)3346-7550 

FAX (03) 3342-5196 

Osaka TEL (06)243-3250 

FAX (06) 243-3253 

KOREA, Seoul TEL (82) 2-784-0030 

FAX (82) 2-784-8014 



International (continued) 

LATIN AMERICA, 

Ft. Lauderdale TEL (305) 484-8600 

FAX (305) 485-9736 

SINGAPORE TEL (65)3481188 

FAX (65)3480161 

SWEDEN, 

Stockholm area TEL (08) 98 61 80 

(Bromma) FAX (08) 98 09 06 

TAIWAN, Taipei TEL (886) 2-7153536 

FAX (886) 2-7122183 

UNITED KINGDOM, 

Manchester area TEL (0925) 830380 

(Warrington) FAX (0925) 830204 

London area TEL (0483) 740440 

(Woking) FAX (0483) 756196 

North American Representatives 

CANADA 

Burnaby, B.C. - DAVETEK MARKETING (604) 430 

Kanata, Ontario - VITEL ELECTRONICS (613) 592- 

Mississauga, Ontario - VITEL ELECTRONICS .(416) 564- 

Lachine, Quebec - VITEL ELECTRONICS (514) 636- 

ILLINOIS 

Skokie- INDUSTRIAL 

REPRESENTATIVES.INC (708) 967- 

INDIANA 

Huntington - ELECTRONIC MARKETING 

CONSULTANTS, INC (317)921- 

Indianapolis - ELECTRONIC MARKETING 

CONSULTANTS, INC (317)921- 

IOWA 

LORENZ SALES (319) 377- 

KANSAS 

Merriam - LORENZ SALES (913) 469- 

Wichita - LORENZ SALES (316)721- 

KENTUCKY 

ELECTRONIC MARKETING 

CONSULTANTS, INC (317)921- 

MICHIGAN 

Holland - COM-TEK SALES, INC (616) 335- 

Brighton - COM-TEK SALES, INC (313) 227- 

MINNESOTA 

Mel Foster Tech. Sales, Inc (612) 941- 

MISSOURI 

LORENZ SALES (314) 997- 

NEBRASKA 

LORENZ SALES (402) 475- 

NEW MEXICO 

THORSON DESERT STATES (505) 883- 

NEWYORK 

East Syracuse - NYCOM, INC (315) 437- 

Hauppauge - COMPONENT 

CONSULTANTS, INC (516)273- 

OHIO 

Centerville - DOLFUSS ROOT & CO (513) 433 

Columbus - DOLFUSS ROOT & CO (614) 885 

Westlake - DOLFUSS ROOT & CO (216) 899 

OREGON 

ELECTRA TECHNICAL SALES, INC (503) 643- 

PENNSYLVANIA 

RUSSELL F. CLARK CO.,INC (412) 242 

PUERTO RICO 

COMP REP ASSOC, INC (809) 746 

UTAH 

Front Range Marketing (801) 288 

WASHINGTON 

ELECTRA TECHNICAL SALES (206)821 

WISCONSIN 

Brookfield- INDUSTRIAL 

REPRESENTATIVES.INC (414) 789 



3680 
0060 
9720 
5951 



8430 

3450 

3450 

4666 

1312 
0500 

3452 

8418 
0007 

9790 

4558 

4660 

4343 

8343 

5050 

6776 
4844 
9370 

5074 

9500 

6550 

2500 

7442 

9393 
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